Vulnerabilidades

Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.

Memory corruption while processing finish_sign command to pass a rsp buffer.

Memory corruption in SPS Application while requesting for public key in sorter TA.

Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.

Memory corruption while processing MBSSID beacon containing several subelement IE.

Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.

Memory corruption while processing TPC target power table in FTM TPC.

Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.

Memory corruption in Core Services while executing the command for removing a single event listener.

Transient DOS in WLAN firmware while parsing MLO (multi-link operation).

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).

Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.

Memory corruption in WLAN HAL while parsing WMI command parameters.

Memory corruption in WLAN HAL while handling command through WMI interfaces.

Memory Corruption in WLAN HOST while fetching TX status information.

Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.

Memory Corruption in WLAN HOST while parsing QMI response message from firmware.

Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.

Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.

Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.