Device compromise via page-alignment integer overflow

Integer overflow in Qualcomm Snapdragon Core allows local users to compromise confidentiality, integrity, and availability. The page-alignment interface aligns an address and size without first validating either value, allowing the alignment arithmetic to overflow. Local access is required, but no privileges or user interaction are required; successful exploitation crosses a security boundary and can compromise device data and operation.