CVE-2023-43513

Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.

CVE-2023-43536

Transient DOS while parse fils IE with length equal to 1.

CVE-2023-43523

Transient DOS while processing 11AZ RTT management action frame received through OTA.

CVE-2023-43522

Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.