Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.
Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
Memory corruption while IOCTL call is invoked from user-space to read board data.
Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit.
Memory corruption while processing IOCTL calls.
Memory corruption while accessing a buffer during IOCTL processing.
Memory corruption when IOCTL call is invoked from user-space to read board data.
Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.
Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
Memory corruption while processing IOCTL calls to unmap the buffers.
Memory corruption while processing frame command IOCTL calls.
Memory corruption while processing IOCTL command to handle buffers associated with a session.
Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.
Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.
Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
Memory corruption while invoking IOCTL calls to unmap the DMA buffers.
memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.
Page 1+ Next →