Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.
Memory corruption while passing pages to DSP with an unaligned starting address.
Memory corruption while allocating buffers in DSP service.
Memory Corruption when accessing trusted execution environment without proper privilege check.
Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.
Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.
Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.
Memory corruption while processing multiple IOCTL calls from HLOS to DSP.
Memory corruption while processing IOCTL calls to unmap the buffers.
Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario.
Memory corruption while processing DDI call with invalid buffer.
Memory corruption during concurrent buffer access due to modification of the reference count.
Memory corruption may occur while accessing a variable during extended back to back tests.
Memory corruption while invoking IOCTL calls to unmap the DMA buffers.
Memory corruption can occur during context user dumps due to inadequate checks on buffer length.
Memory corruption while accessing a synchronization object during concurrent operations.
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.
Memory corruption may occur while processing the OIS packet parser.
Memory corruption while processing DDI command calls.
Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,
Page 1+ Next →