Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.
information disclosure while invoking calibration data from user space to update firmware size.
Information disclosure possible while audio playback.
Transient DOS while parsing video packets received from the video firmware.
Information disclosure may be there when a guest VM is connected.
Information disclosure while parsing the multiple MBSSID IEs from the beacon.
Transient DOS when processing a received frame with an excessively large authentication information element.
Memory corruption while parsing the ML IE due to invalid frame content.
Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.
Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA.
Transient DOS may occur while processing malformed length field in SSID IEs.
Transient DOS while processing video packets received from video firmware.
Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
Information disclosure while reading data from an image using specified offset and size parameters.
Information disclosure while creating MQ channels.
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.
Information disclosure when Video engine escape input data is less than expected minimum size.
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
Memory corruption while processing packet data with exceedingly large packet.