Memory read or write via unchecked DSP index

Out-of-bounds memory access in Qualcomm Snapdragon VR service allows local users to read or write memory through DSP selection values. The VR service uses a DSP selection value as an array index without validating that the value falls within the valid range. Local execution on a device containing an affected chipset is required, and a crafted value can access memory outside the intended array, compromising data or interrupting the service.