Memory corruption while redirecting log file to any file location with any file name.
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.
Memory corruption in WLAN Host while processing RRM beacon on the AP.
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
Memory corruption while performing SCM call.
Memory corruption while performing SCM call with malformed inputs.
Memory corruption while processing a GP command response.
Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range.
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
Memory corruption in Kernel while parsing metadata.
Memory corruption when processing cmd parameters while parsing vdev.
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Memory corruption when allocating and accessing an entry in an SMEM partition.
Memory corruption during the secure boot process, when the bootm command is used, it bypasses the authentication of the kernel/rootfs image.
Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.
Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.
Memory corruption while deinitializing a HDCP session.
Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.
Memory corruption in DSP Services during a remote call from HLOS to DSP.