CVE-2022-33275

Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range...

CVE-2025-27029 Buffer Over-read in WLAN HAL

Transient DOS while processing the tone measurement response buffer when the response buffer is out of range...

CVE-2023-28566

Information disclosure in WLAN HAL while handling the WMI state info command...

CVE-2023-28565

Memory corruption in WLAN HAL while handling command streams through WMI interfaces...

CVE-2023-28564

Memory corruption in WLAN HAL while passing command parameters through WMI interfaces...

CVE-2023-28549

Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload...

CVE-2023-28565 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while handling command streams through WMI interfaces...

CVE-2023-28564 Use of Out-of-range Pointer Offset in WLAN HAL

Memory corruption in WLAN HAL while passing command parameters through WMI interfaces...

CVE-2023-28560 Buffer Copy Without Checking Size of Input in WLAN HAL

Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload...

CVE-2023-28549 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL

Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload...