Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
Transient DOS while handling PS event when Program Service name length offset value is set to 255.
Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.
Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
Transient DOS while parsing ESP IE from beacon/probe response frame.
Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
Memory corruption in WLAN handler while processing PhyID in Tx status handler.