Memory corruption while processing MBSSID beacon containing several subelement IE.
Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.
Memory corruption during management frame processing due to mismatch in T2LM info element.
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.
Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.
Information Disclosure while parsing beacon frame in STA.
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.
Memory corruption while processing TPC target power table in FTM TPC.
Memory corruption when processing cmd parameters while parsing vdev.
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
Information disclosure while parsing the OCI IE with invalid length.
Memory corruption when more scan frequency list or channels are sent from the user space.
Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.
Memory corruption while station LL statistic handling.
Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.
Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.
Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.
Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call.
Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.
Memory corruption while handling IOCTL call from user-space to set latency level.
Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality.
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.
Memory corruption in WLAN HOST while receiving an WMI event from firmware.
Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.
Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.