Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

Memory corruption due to global buffer overflow when a test command uses an invalid payload type.

Transient DOS while parsing the EPTM test control message to get the test pattern.

Information disclosure while processing the hash segment in an MBN file.

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

Memory corruption in Core while processing control functions.