Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host

Transient DOS in WLAN Firmware while parsing a BTM request

Transient DOS while parsing WPA IES, when it is passed with length more than expected size

Transient DOS in WLAN Firmware while processing a FTMR frame

Transient DOS when processing a NULL buffer while parsing WLAN vdev

Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast

Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame

Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids

Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame

Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE

Transient DOS in WLAN Firmware while parsing t2lm buffers

Transient DOS in WLAN Firmware while parsing no-inherit IES

Transient DOS in WLAN Firmware while parsing rsn ies

Transient DOS in WLAN Firmware while parsing a NAN management frame

Transient DOS in WLAN firmware while parsing MLO (multi-link operation)

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame

Transient DOS while parsing WLAN beacon or probe-response frame

Transient DOS in WLAN Firmware while parsing FT Information Elements

Transient DOS in WLAN Firmware while processing frames with missing header fields

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame

Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM

Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes

Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state

Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon

Transient DOS due to improper input validation in WLAN Host

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation

Transient DOS due to buffer over-read in WLAN Host while parsing frame information

Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs

Information disclosure due to buffer over-read in WLAN while parsing NMF frame

Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames

Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes

Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header

Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold

Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes

Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networking

Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames

Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Snapdragon Auto, Snapdragon Compute, Snapdragon…

Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Auto, Snapdragon Compute,…

Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…

Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…

Possible out of bound write due to lack of boundary check for the maximum size of buffer when sending a DCI packet to remote process in Snapdragon Auto, Snapdragon Compute,…