Memory corruption while parsing the memory map info in IOCTL calls.
Memory corruption while processing multiple IOCTL calls from HLOS to DSP.
Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter.
Memory corruption while handling IOCTL calls to set mode.
Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check.
Memory corruption while processing memory map or unmap IOCTL operations simultaneously.
Memory corruption while processing an IOCTL call to set mixer controls.
Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality.
Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.
Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.
Memory Corruption when accessing buffers with invalid length during TA invocation.
Memory corruption while prociesing command buffer buffer in OPE module.
Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.
Memory corruption while processing a frame request from user.
Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,
Memory corruption may occur while processing the OIS packet parser.
Memory corruption while processing DDI command calls.
Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destroy the same.
Memory corruption while processing user packets to generate page faults.