Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
Transient DOS may occur when multi-profile concurrency arises with QHS enabled.
Transient DOS while parsing the EPTM test control message to get the test pattern.
Memory corruption due to global buffer overflow when a test command uses an invalid payload type.
Information disclosure while processing the hash segment in an MBN file.
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
Memory corruption in Core while processing control functions.