Transient DOS in WLAN Firmware while parsing a NAN management frame

Transient DOS in WLAN firmware while parsing MLO (multi-link operation)

Transient DOS while parsing WLAN beacon or probe-response frame

Transient DOS in WLAN Firmware while parsing FT Information Elements

Transient DOS in WLAN Firmware while processing frames with missing header fields

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame

Transient DOS due to buffer over-read in WLAN while sending a packet to device

Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM

Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes

Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state

Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon

Transient DOS due to improper input validation in WLAN Host

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation

Transient DOS due to buffer over-read in WLAN Host while parsing frame information

Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs

Information disclosure due to buffer over-read in WLAN while parsing NMF frame

Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames

Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes

Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage

Information disclosure may occur while processing the hypervisor log

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE

Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames

Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames

Information disclosure due to buffer over-read in WLAN while parsing BTM action frame

Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check

Information disclosure while registering commands from clients with diag through diagHal

Buffer Over-read in WLAN Host Communication

There may be information disclosure during memory re-allocation in TZ Secure OS

Transient DOS while loading the TA ELF file

Information Disclosure in WLAN Host when processing WMI event command

Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis

information disclosure due to cryptographic issue in Core during RPMB read request

Information disclosure due to buffer overread in Core

Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames

Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame