Memory corruption while handling client exceptions, allowing unauthorized channel access

Memory corruption while reading the FW response from the shared queue

Memory corruption while processing GPU page table switch

Memory corruption while processing voice packet with arbitrary data received from ADSP

Memory corruption while handling session errors from firmware

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI

Cryptographic issue while performing RSA PKCS padding decoding

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID

Transient DOS while parsing video packets received from the video firmware