Transient DOS while processing TID-to-link mapping IE elements.
Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.
Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.
Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length.
Transient DOS in Data Modem during DTLS handshake.
Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.
Transient DOS in WLAN Firmware while parsing t2lm buffers.
Transient DOS in WLAN Firmware while parsing a NAN management frame.
Transient DOS in Multi-Mode Call Processor while processing UE policy container.
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
Transient DOS in WLAN Firmware while parsing rsn ies.
Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
Transient DOS while parsing the received TID-to-link mapping action frame.
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
Transient DOS while parsing ESP IE from beacon/probe response frame.
Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.
Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0.
Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host.
Transient DOS while parsing ESP IE from beacon/probe response frame.
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.
Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.
Transient DOS in Bluetooth Host while rfc slot allocation.
Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).
Transient DOS in Audio while remapping channel buffer in media codec decoding.
Transient DOS in Modem while triggering a camping on an 5G cell.
Transient DOS in WLAN Firmware while processing frames with missing header fields.
Transient DOS in Modem while processing RRC reconfiguration message.
Transient DOS while parsing WLAN beacon or probe-response frame.
Transient DOS in Modem while processing invalid System Information Block 1.
Transient DOS in WLAN Firmware while parsing FT Information Elements.
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.
The device may enter into error state when some tool or application gets failure at 1st buffer map all and performs 2nd buffer map which happens to be at same physical address in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar, Rennell, SA6155P, SDM660, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA.
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.
Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.
Transient DOS may occur while parsing EHT operation IE or EHT capability IE.
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.
Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics.
Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions.
Transient DOS while decoding message of size that exceeds the available system memory.