CVE-2022-22088

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

CVE-2022-33285

Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.

CVE-2022-40518

Information disclosure due to buffer overread in Core

CVE-2022-40519

Information disclosure due to buffer overread in Core

CVE-2022-33286

Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.