Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
Memory corruption while processing escape code, when DisplayId is passed with large unsigned value.
Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.
Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics render.
Memory corruption while processing the IOCTL FM HCI WRITE request.
Memory corruption in Core Services while executing the command for removing a single event listener.