Memory corruption via HLOS-to-DSP remote call

Use-after-free in Qualcomm DSP Services on affected Snapdragon chipsets allows local users to corrupt memory through an HLOS-to-DSP call. DSP Services retains or accesses memory after its lifetime ends during a remote procedure call from the high-level operating system to the DSP; Qualcomm has not disclosed the freed object or exact lifetime error. Low-privileged local access is required, and successful exploitation can compromise confidentiality, integrity, and availability within the affected device.