Local memory disclosure via unchecked packet length

Out-of-bounds read in Qualcomm Snapdragon VR service allows local users to read memory beyond a buffer through a malformed packet. The VR service accepts a packet length without adequate validation while handling a data transfer, causing the copy operation to read past the packet buffer. Local access is required, with no user interaction or prior privileges; further exploit outcomes beyond the out-of-bounds read remain undisclosed.