CVE-2023-43536

Transient DOS while parse fils IE with length equal to 1.

CVE-2023-43511

Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains IPPROTO_NONE as the next header.

CVE-2023-33109

Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.

CVE-2023-33062

Transient DOS in WLAN Firmware while parsing a BTM request.

CVE-2024-33051

Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.

CVE-2024-43050

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.

CVE-2024-38408

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.