Memory corruption when another driver calls an IOCTL with invalid input/output buffer.Referenceshttps://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html