Out-of-bounds Write in WinBlast Driver
Memory corruption while accessing a buffer during IOCTL processing.
Memory corruption while accessing a buffer during IOCTL processing.
Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently.
Memory Corruption when multiple threads simultaneously access a memory free API.
Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.
Transient DOS when processing a received frame with an excessively large authentication information element.
Memory Corruption when multiple threads concurrently access and modify shared resources.
Memory corruption while preprocessing IOCTLs in sensors.
Memory corruption while processing a video session to set video parameters.
Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.
Information disclosure while processing batch command execution in Video driver.
Transient DOS while processing IOCTL call for image encoding.