Memory corruption in Core while processing control functions.

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

Memory corruption due to global buffer overflow when a test command uses an invalid payload type.

Transient DOS while parsing the EPTM test control message to get the test pattern.

Information disclosure while processing the hash segment in an MBN file.

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.