Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.
Information disclosure while processing the hash segment in an MBN file.
Memory corruption due to global buffer overflow when a test command uses an invalid payload type.
Transient DOS while parsing the EPTM test control message to get the test pattern.
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
Memory corruption in Core while processing control functions.
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.