2 known vulnerabilities · sorted by CVSS score
Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.
Memory corruption while processing IOCTL calls to unmap the buffers.