Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
Memory corruption when the captureRead QDCM command is invoked from user-space.
Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.
Memory corruption may occur while processing device IO control call for session control.
Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.
Memory corruption occurs when handling client calls to EnableTestMode through an Escape call.
Memory corruption can occur during context user dumps due to inadequate checks on buffer length.
Memory corruption may occour while generating test pattern due to negative indexing of display ID.
Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine.
Memory corruption while handling invalid inputs in application info setup.
Memory corruption while processing a frame request from user.
Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.
Memory corruption may occur while accessing a variable during extended back to back tests.
Memory corruption while processing memory map or unmap IOCTL operations simultaneously.
Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset.
Memory corruption while processing control commands in the virtual memory management interface.
Memory corruption during the FRS UDS generation process.
Memory Corruption when sending random number generator command with insufficient output buffer size.
Memory corruption while processing a video session to set video parameters.
Memory corruption while handling IOCTL calls to set mode.