In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-8923
https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html