Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.
Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process.
Information disclosure while parsing the OCI IE with invalid length.
Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit.
Memory corruption while processing an IOCTL command with an arbitrary address.
Memory corruption while processing IOCTL command to handle buffers associated with a session.
Memory corruption while handling IOCTL call from user-space to set latency level.
Memory corruption while preprocessing IOCTL request in JPEG driver.
Transient DOS while processing IOCTL call for image encoding.
Memory corruption while processing IOCTL calls.
Memory corruption while accessing a buffer during IOCTL processing.
Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call.
Memory corruption while processing IOCTL calls to unmap the buffers.
Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.
Memory corruption while processing IOCTL calls to add route entry in the HW.
Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.
Memory corruption while invoking IOCTL map buffer request from userspace.
Certain unprivileged processes are able to perform IOCTL calls.
Memory corruption while IOCTL call is invoked from user-space to read board data.
Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.
Page 1+ Next →