Memory corruption while processing packet data with exceedingly large packet.
Memory corruption during concurrent buffer access due to modification of the reference count.
Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.
Memory corruption while station LL statistic handling.
Memory corruption can occur during context user dumps due to inadequate checks on buffer length.
Memory corruption while handling test pattern generator IOCTL command.
Memory corruption due to global buffer overflow when a test command uses an invalid payload type.
Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.
Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.
Memory corruption while allocating buffers in DSP service.
Transient DOS while processing IOCTL call for image encoding.
Memory corruption while accessing a synchronization object during concurrent operations.
Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.
Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.
Memory corruption when processing camera sensor input/output control codes with invalid output buffers.
Memory corruption while processing IPA statistics, when there are no active clients registered.
Memory corruption while processing an escape call.
Memory corruption may occur while processing device IO control call for session control.
memory corruption while processing an image encoding completion event.
Memory corruption while processing frame packets.
← Previous Page 5