Memory Corruption when handling power management requests with improperly sized input/output buffers.
Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.
Memory Corruption when retrieving output buffer with insufficient size validation.
Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
Memory corruption can occur during context user dumps due to inadequate checks on buffer length.
Memory corruption while processing fastboot commands with invalid input.
Memory corruption while processing fastboot commands with improperly formatted input.
Memory corruption while processing IOCTL command when device is in power-save state.
Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations.
Memory corruption in diagnostic services due to absence of input validation
Memory Corruption when accessing buffers with invalid length during TA invocation.
Memory corruption while allocating buffers in DSP service.
Memory Corruption when processing device identifier strings that exceed the expected maximum length.
Memory corruption while processing user buffers.
Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.
Page 1+ Next →