Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN HAL

Buffer Over-read in BT Controller

Buffer Over-read in WLAN Firmware

Improper Input Validation in Modem

Reachable Assertion in Modem

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host Communication

Buffer Over-read in Multi-Mode Call Processor

Buffer Over-read in WLAN Host Communication

Insufficient Granularity of Access Control in Core

Buffer Over-read in WLAN HOST

Buffer Over-read in Multi Mode Call Processor

Integer Overflow or Wraparound in WLAN Host Communication

Buffer Over-read in WLAN Firmware

Buffer Over-read in Multi Mode Call Processor

Transient DOS while processing TID-to-link mapping IE elements

Transient DOS while parsing the received TID-to-link mapping action frame

Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame

Information disclosure while handling SA query action frame

INformation disclosure while handling Multi-link IE in beacon frame

Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command

Information disclosure while handling T2LM Action Frame in WLAN Host

Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received

Transient DOS while processing DL NAS TRANSPORT message with payload length 0

Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification

Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR

Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame

Transient DOS while processing PDU Release command with a parameter PDU ID out of range

Transient DOS while processing CAG info IE received from NW

Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16

Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR

Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers

Transient DOS while processing IE fragments from server during DTLS handshake

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame

Transient DOS while processing 11AZ RTT management action frame received through OTA

Transient DOS in Multi-Mode Call Processor while processing UE policy container

Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage

Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver

Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element

Transient DOS in Data Modem during DTLS handshake

Transient DOS in WLAN Firmware while processing a FTMR frame

Transient DOS in Data modem while handling TLB control messages from the Network

Transient DOS in Modem when a Beam switch request is made with a non-configured BWP

Transient DOS in Modem after RRC Setup message is received

Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids

Transient DOS in Bluetooth Host while rfc slot allocation