INformation disclosure while handling Multi-link IE in beacon frame.
Transient DOS while loading the TA ELF file.
Transient DOS during music playback of ALAC content.
Information disclosure while processing a firmware event.
Transient DOS while parsing probe response and assoc response frame.
Information disclosure while handling beacon or probe response frame in STA.
Transient DOS while processing power control requests with invalid antenna or stream values.
Information disclosure while handling beacon probe frame during scan entry generation in client side.
Information disclosure while handling SA query action frame.
Information disclosure while processing IO control commands.
Transient DOS while processing the CU information from RNR IE.
Information disclosure while processing information on firmware image during core initialization.
Transient DOS while parsing the EPTM test control message to get the test pattern.
Transient DOS while handling command data during power control processing.
Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes.
Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.
Information disclosure in Automotive multimedia due to buffer over-read.
Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.
Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.
Information disclosure due to buffer over-read while parsing DNS response packets in Modem.
Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.
Information disclosure due to buffer overread in Linux sensors
Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.
Transient DOS due to buffer over-read in WLAN Host while parsing frame information.
Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
Information disclosure due to buffer over-read in modem while reading configuration parameters.
Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element.
Information disclosure while processing message from client with invalid payload.
Transient DOS while parsing video packets received from the video firmware.
Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process.
Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual size of the services buffer.
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
Transient DOS while handling PS event when Program Service name length offset value is set to 255.
Transient DOS while processing TID-to-link mapping IE elements.
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.
Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.
Transient DOS while processing a frame with malformed shared-key descriptor.
Information disclosure in modem due to improper check of IP type while processing DNS server query
Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet
Information disclosure in modem due to buffer over read in dns client due to missing length check
Information disclosure in modem due to buffer over-read while processing response from DNS server
Information disclosure in modem due to buffer over-red while performing checksum of packet received
Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message
Information disclosure while opening a fastrpc session when domain is not sanitized.
In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.
Transient DOS when processing a received frame with an excessively large authentication information element.
Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.
Information disclosure while processing batch command execution in Video driver.