Memory corruption via unchecked public-key buffer copy

Memory corruption in Qualcomm SPS Application firmware allows local users to compromise confidentiality, integrity, and availability. When requesting a public key from the sorter trusted application, SPS copies returned input without checking that it fits the destination buffer. Exploitation requires local execution on affected Qualcomm hardware; public material does not identify the function, buffer, or exact trigger.