Buffer Over-read in MProc
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
Memory corruption while processing IOCTL calls to unmap the buffers.
Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
Transient DOS while parsing BTM ML IE when per STA profile is not included.
Transient DOS while processing the CU information from RNR IE.
Memory corruption while handling session errors from firmware.