CVE-2017-0329
An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local malicious application to execute arbitrary code within the context of the boot and power management processor.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.10%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local malicious application to execute arbitrary code within the context of the boot and power management processor. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.18. Android ID:A-34115304. References: N-CVE-2017-0329.
- CVSS 3.0
- 7.0 HIGHCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 2.10% probability · 81th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- psirt@nvidia.com
References
- http://www.securityfocus.com/bid/97353Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038201
- https://source.android.com/security/bulletin/2017-04-01.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/97353Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038201
- https://source.android.com/security/bulletin/2017-04-01.htmlPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.