Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.
Memory corruption while processing packet data with exceedingly large packet.
Memory corruption while processing a frame request from user.
Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.
Memory corruption while station LL statistic handling.
Memory corruption while processing IPA statistics, when there are no active clients registered.
Memory corruption while processing a config call from userspace.
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.
Memory corruption while processing user buffers.
Memory corruption while maintaining memory maps of HLOS memory.
Memory corruption can occur during context user dumps due to inadequate checks on buffer length.
Memory corruption when calculating oversized partition sizes without proper checks.
Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.
Memory corruption while processing user packets to generate page faults.
Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.
Memory corruption while processing large input data from a remote source via a communication interface.
Memory corruption may occur during IO configuration processing when the IO port count is invalid.
Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.
Memory corruption while IOCTL call is invoked from user-space to read board data.
Page 1+ Next →