Memory corruption while redirecting log file to any file location with any file name.
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.
Memory corruption in WLAN Host while processing RRM beacon on the AP.
Memory corruption while performing SCM call.
Memory corruption while performing SCM call with malformed inputs.
Memory corruption while processing a GP command response.
Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range.
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
Memory corruption in Kernel while parsing metadata.
Memory corruption when processing cmd parameters while parsing vdev.
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Memory corruption when allocating and accessing an entry in an SMEM partition.
Memory corruption during the secure boot process, when the bootm command is used, it bypasses the authentication of the kernel/rootfs image.
Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.
Memory corruption while deinitializing a HDCP session.
Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.
Transient DOS while parsing ieee80211parsemscsie in WIN WLAN driver.
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.