Use After Free in Computer Vision
Memory corruption while invoking IOCTL calls to unmap the DMA buffers.
Export limit exceeded: 425857 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Memory corruption while invoking IOCTL calls to unmap the DMA buffers.
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
Memory corruption when two threads try to map and unmap a single node simultaneously.
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
Transient DOS while parsing probe response and assoc response frame.
Memory corruption while processing IOCTL call for getting group info.
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.
Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls.
While processing the authentication message in UE, improper authentication may lead to information disclosure.
Information disclosure while deriving keys for a session for any Widevine use case.
Transient DOS during hypervisor virtual I/O operation in a virtual machine.
Memory corruption when IOCTL call is invoked from user-space to read board data.
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.
Memory corruption during management frame processing due to mismatch in T2LM info element.
Memory corruption when the IOCTL call is interrupted by a signal.
Memory corruption while playing audio file having large-sized input buffer.
Memory corruption when the payload received from firmware is not as per the expected protocol size.
Memory corruption while operating the mailbox in Automotive.
Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.