Memory corruption in Core Services while executing the command for removing a single event listener.
Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics render.
Memory corruption while processing the IOCTL FM HCI WRITE request.
Memory corruption while processing escape code, when DisplayId is passed with large unsigned value.
Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.