Memory corruption while processing large input data from a remote source via a communication interface.
Memory corruption while processing DDI call with invalid buffer.
memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.
Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.
Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.
Memory corruption while handling buffer mapping operations in the cryptographic driver.
Memory corruption while prociesing command buffer buffer in OPE module.
Memory Corruption when sending random number generator command with insufficient output buffer size.
Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.
Memory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU.
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.
Memory corruption when processing camera sensor input/output control codes with invalid output buffers.
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call.
Memory corruption while processing packet data with exceedingly large packet.
Memory corruption while IOCTL call is invoked from user-space to read board data.
Memory corruption while copying packets received from unix clients.
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.
Memory corruption while copying the result to the transmission queue in EMAC.
Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.
Memory corruption while handling invalid inputs in application info setup.