Local out-of-bounds access via unchecked page offset

Improper input validation in Qualcomm Snapdragon products allows local users to trigger out-of-bounds access in Linux Graphics. The graphics page-insertion path accepts a page offset without validating that it remains within the target bounds before inserting the page. The attacker must already run code locally; the exact read, write, or crash behavior resulting from the out-of-bounds access is unspecified.