Description
In the cpuidle driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, the list_for_each macro was not used correctly which could lead to an untrusted pointer dereference.
References (2)
Core 2
Core References
Various Sources x_refsource_misc
https://www.vulnerabilitycenter.com/#%21vul=87349
Patch, Vendor Advisory x_refsource_misc
https://source.android.com/security/bulletin/pixel/2018-07-01#qualcomm-components
Scores
CVSS v3
7.8
EPSS
0.0017
EPSS Percentile
6.4%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-476
Status
published
Products (1)
google/android
Published
Jul 06, 2018
Tracked Since
Feb 18, 2026