Use After Free in Windows WLAN Host

Out-of-bounds Write in Camera Driver

Memory corruption while accessing a synchronization object during concurrent operations

Memory corruption while performing sensor register read operations

Memory corruption while parsing clock configuration data for a specific hardware type

Integer Underflow (Wrap or Wraparound) in WLAN Host

Use After Free in Camera Driver

Buffer Over-read in WLAN Firmware

Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element

Transient DOS while processing the CU information from RNR IE

Transient DOS while parsing BTM ML IE when per STA profile is not included

Transient DOS while parsing fragments of MBSSID IE from beacon frame

Information disclosure while running video usecase having rogue firmware

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID

Transient DOS can occur while processing UCI command

Out-of-bounds Write in Camera Driver

Out-of-bounds Write in Camera Driver