Information disclosure while handling SA query action frame

INformation disclosure while handling Multi-link IE in beacon frame

Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame

Information disclosure while handling T2LM Action Frame in WLAN Host

Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame

Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame

Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number

Transient DOS while processing 11AZ RTT management action frame received through OTA

Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver

Transient DOS in WLAN Firmware while processing a FTMR frame

Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids

Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame

Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE

Transient DOS in WLAN Firmware while parsing t2lm buffers

Transient DOS in Modem while allocating DSM items

Transient DOS in WLAN firmware while parsing MLO (multi-link operation)

Transient DOS while parsing WLAN beacon or probe-response frame

Transient DOS in WLAN Firmware while parsing FT Information Elements

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame

Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM

Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes

Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state

Transient DOS due to improper input validation in WLAN Host

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation

Transient DOS due to buffer over-read in WLAN Host while parsing frame information

Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs

Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes

Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networking

Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…

Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Auto, Snapdragon Compute,…