Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
Memory corruption in WLAN handler while processing PhyID in Tx status handler.
Transient DOS while parsing ESP IE from beacon/probe response frame.
Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
Transient DOS while handling PS event when Program Service name length offset value is set to 255.