Memory Corruption when sending random number generator command with insufficient output buffer size.
Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit.
Memory corruption when the captureRead QDCM command is invoked from user-space.
Memory corruption while triggering commands in the PlayReady Trusted application.
Memory corruption due to global buffer overflow when a test command uses an invalid payload type.
Memory Corruption when accessing buffers with invalid length during TA invocation.
Memory corruption while processing DDI command calls.
Memory corruption while prociesing command buffer buffer in OPE module.
Memory corruption while processing user buffers.
Memory corruption while processing GPU commands.
Memory corruption while processing a frame request from user.
Memory corruption while processing packet data with exceedingly large packet.
Memory corruption while executing timestamp video decode command with large input values.
Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.
Memory corruption can occur during context user dumps due to inadequate checks on buffer length.
Memory corruption while processing a GP command response.
Memory corruption while processing large input data from a remote source via a communication interface.
Memory corruption while processing DDI call with invalid buffer.
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.
Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.
Page 1+ Next →