7 known vulnerabilities · sorted by CVSS score
Transient DOS while processing a frame with malformed shared-key descriptor.
Transient DOS while processing power control requests with invalid antenna or stream values.
Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.
Transient DOS while processing the EHT operation IE in the received beacon frame.
Transient DOS while handling command data during power control processing.
Transient DOS while handling beacon frames with invalid IE header length.
Information disclosure while registering commands from clients with diag through diagHal.