CVE-2022-33251

Transient DOS due to reachable assertion in Modem because of invalid network configuration...

CVE-2022-33299

Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data...

CVE-2022-40508

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported...

CVE-2022-40535

Transient DOS due to buffer over-read in WLAN while sending a packet to device...

CVE-2022-40504

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network...

CVE-2022-40513

Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state...

CVE-2024-21479

Transient DOS during music playback of ALAC content...

CVE-2024-21477

Transient DOS while parsing a protected 802.11az Fine Time Measurement FTM frame...

CVE-2024-38397

Transient DOS while parsing probe response and assoc response frame...

CVE-2024-23352

Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA...

CVE-2024-23358

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem...

CVE-2024-23385

Transient DOS as modem reset occurs when an unexpected MAC RAR with invalid PDU length is seen at UE...

CVE-2024-23363

Transient DOS while processing an improperly formatted Fine Time Measurement FTM management frame...

CVE-2024-23364

Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element IE of a beacon frame that is received from over-the-air OTA...

CVE-2024-45558

Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length...

CVE-2024-33063

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present...

CVE-2024-33014

Transient DOS while parsing ESP IE from beacon/probe response frame...

CVE-2024-33070

Transient DOS while parsing ESP IE from beacon/probe response frame...

CVE-2024-33012

Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon...

CVE-2024-33057

Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location...