Improper Access to the VM resource manager can lead to Memory Corruption

Transient DOS while parsing per STA profile in ML IE

Transient DOS may occur while parsing SSID in action frames

Transient DOS may occur while processing the country IE

Information disclosure while parsing the OCI IE with invalid length

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present

Transient DOS while parsing probe response and assoc response frame

Transient DOS while processing TID-to-link mapping IE elements

Information disclosure in Video while parsing mp2 clip with invalid section length

Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element

Improper Input Validation in Trusted Execution Environment

Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation

Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage

Memory corruption while processing multiple IOCTL calls from HLOS to DSP

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the…

Transient DOS while processing the CU information from RNR IE

Buffer Over-read in FM Host