Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.
Memory corruption when IOCTL call is invoked from user-space to read board data.
Memory corruption while preprocessing IOCTLs in sensors.
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call.
Memory corruption while handling IOCTL call from user-space to set latency level.
Memory corruption while processing concurrent IOCTL calls.
Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.
Memory corruption while invoking IOCTL map buffer request from userspace.
Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.
Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.
Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.
Memory corruption while processing IOCTL calls to add route entry in the HW.
Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
Memory corruption while processing user buffers.
Memory corruption while processing IOCTL call to set metainfo.
Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.
Memory corruption while processing DDI call with invalid buffer.
Memory corruption while preprocessing IOCTL request in JPEG driver.
Memory corruption while acquire and update IOCTLs during IFE output resource ID validation.