Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE

Cryptographic Issues in BT Controller

Buffer Over-read in WLAN HOST

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list

Double Free in Windows WLAN Host

Out-of-bounds Read in Windows WLAN Host

Out-of-bounds Read in Windows WLAN Host

Use of Out-of-range Pointer Offset in WLAN Windows Host

Use After Free in Windows WLAN Host

Buffer Over-read in WLAN Windows Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Buffer Over-read in WLAN Windows Host

Stack-based Buffer Overflow in WLAN Windows Host

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Stack-based Buffer Overflow in WLAN Windows Host

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Stack-based Buffer Overflow in WLAN Windows Host

Buffer Copy Without Checking Size of Input in WLAN Windows Host

Integer Overflow or Wraparound in WLAN HOST

Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level

Memory corruption in WLAN HOST while receiving an WMI event from firmware

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Firmware

Buffer Over-read in BT Controller

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host Communication

Buffer Over-read in WLAN Host Communication

Buffer Copy Without Checking Size of Input in WLAN Host

Buffer Over-read in WLAN HOST

Use After Free in WLAN Host

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN HOST

Integer Underflow (Wrap or Wraparound) in WLAN Host Communication

Buffer Over-read in WLAN Firmware

Buffer Over-read in WLAN Host

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame

Transient DOS in WLAN Firmware while processing a FTMR frame

Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame

Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE

Transient DOS in WLAN Firmware while parsing t2lm buffers

Transient DOS while parsing WLAN beacon or probe-response frame

Transient DOS in WLAN Firmware while parsing FT Information Elements

Buffer Over-read in WLAN Host

Buffer Over-read in WLAN Firmware

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan