Memory corruption during concurrent buffer access due to modification of the reference count.

Memory corruption during concurrent SSR execution due to race condition on the global maps list.

Memory corruption while handling IOCTL call from user-space to set latency level.

Memory corruption in Audio when memory map command is executed consecutively in ADSP.

Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.

Memory corruption while processing a private escape command in an event trigger.

Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

Memory corruption in HLOS while invoking IOCTL calls from user-space.

Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.

Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.

Memory corruption while processing memory map or unmap IOCTL operations simultaneously.

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.

Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.

Memory corruption in Automotive Display while destroying the image handle created using connected display driver.

Memory corruption while processing commands from A2dp sink command queue.

Memory corruption while calling the NPU driver APIs concurrently.

Memory corruption in DSP Services during a remote call from HLOS to DSP.