Local memory corruption via TX status over-read

Buffer over-read in Qualcomm WLAN HOST firmware allows local users to corrupt memory while the host fetches transmit-status information. The transmit-status path reads beyond its buffer when retrieving TX status data, although Qualcomm has not disclosed the responsible function or malformed field. Exploitation requires local low-privileged access; Qualcomm reports memory corruption but does not specify whether it causes disclosure, code execution, or a crash.