Transient DOS while parse fils IE with length equal to 1.

Transient DOS while processing a frame with malformed shared-key descriptor.

Transient DOS while handling beacon frames with invalid IE header length.

Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.

Transient DOS may occur while parsing EHT operation IE or EHT capability IE.

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.

Transient DOS while parsing per STA profile in ML IE.

Transient DOS may occur while parsing SSID in action frames.

Transient DOS may occur while processing malformed length field in SSID IEs.

Transient DOS while processing received beacon frame.

Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.

Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual size of the services buffer.

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.