Code execution via ADSP voice-packet overflow

Memory corruption in Qualcomm audio firmware allows local users to execute code by supplying arbitrary voice-packet data through the ADSP. Voice-packet processing permits an integer overflow to produce an undersized allocation or length calculation, leading subsequent packet data to overflow a buffer; Qualcomm has not published the affected function or operation. Exploitation requires local low-privilege access to the ADSP voice path, and successful corruption can compromise confidentiality, integrity, and availability within the affected firmware context.