memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.
Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.
Memory corruption while processing frame command IOCTL calls.
Memory corruption while processing IOCTL calls to unmap the buffers.
Memory corruption while processing IOCTL command to handle buffers associated with a session.
Memory corruption while accessing a buffer during IOCTL processing.
Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.
Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit.
Memory corruption while processing IOCTL calls.
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
Memory corruption while processing an IOCTL command with an arbitrary address.
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call.
Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.
Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.
Memory corruption while invoking IOCTL calls to unmap the DMA buffers.
Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.
Memory corruption while handling IOCTL call from user-space to set latency level.
Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.
Memory corruption while IOCTL call is invoked from user-space to read board data.
Page 1+ Next →