Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
Transient DOS while processing TID-to-link mapping IE elements.
Transient DOS while parsing the EPTM test control message to get the test pattern.
Information disclosure while parsing the OCI IE with invalid length.
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).
Information disclosure while parsing the multiple MBSSID IEs from the beacon.
Transient DOS may occur while processing the country IE.
Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.
Transient DOS while processing power control requests with invalid antenna or stream values.
Transient DOS while processing video packets received from video firmware.
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.
Transient DOS when processing a received frame with an excessively large authentication information element.
Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA.
Memory corruption while parsing the ML IE due to invalid frame content.
Transient DOS when an LTE RLC packet with invalid TB is received by UE.
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.
Transient DOS while creating NDP instance.
Transient DOS during music playback of ALAC content.
Information disclosure while handling beacon or probe response frame in STA.
Transient DOS during hypervisor virtual I/O operation in a virtual machine.