Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
Memory Corruption when retrieving output buffer with insufficient size validation.
Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.
Memory corruption while processing IOCTL calls for escape operations.
Memory corruption while processing multiple IOCTL command for escape operations.
Memory corruption while accessing a buffer during IOCTL processing.
Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.
Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.
Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.
Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.
Memory corruption while IOCTL call is invoked from user-space to read board data.
Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.
memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.
Memory Corruption when handling power management requests with improperly sized input/output buffers.
Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.
Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call.
Page 1+ Next →