Use After Free in Automotive GPU
Memory Corruption when copying data from a freed source while executing performance counter deselect operation.
Memory Corruption when copying data from a freed source while executing performance counter deselect operation.
Transient DOS when processing target power rate tables during channel configuration.
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.