Transient DOS may occur when multi-profile concurrency arises with QHS enabled.
In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.
Information disclosure while handling beacon probe frame during scan entry generation in client side.
Transient DOS while handling PS event when Program Service name length offset value is set to 255.
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.
Transient DOS while processing IOCTL call for image encoding.
Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.
Transient DOS when MAC configures config id greater than supported maximum value.
Information disclosure while reading data from an image using specified offset and size parameters.
Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.
Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.
Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
Information disclosure while processing the hash segment in an MBN file.
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
Transient DOS while processing a frame with malformed shared-key descriptor.
Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.
Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host.