Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.

Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.

Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.

Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.

Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.

Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.

Memory corruption while running VK synchronization with KASAN enabled.

Memory corruption in wearables while processing data from AON.

Transient DOS in WLAN Firmware while parsing a BTM request.