Transient DOS while parsing ESP IE from beacon/probe response frame.

Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.

Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.

Transient DOS while parsing ESP IE from beacon/probe response frame.

Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.

Transient DOS while handling PS event when Program Service name length offset value is set to 255.

Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process.

Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.

Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.

Information disclosure while handling T2LM Action Frame in WLAN Host.