CVE-2017-0329
An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local malicious application to execute arbitrary code within the context of the boot and power management processor.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.10%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local malicious application to execute arbitrary code within the context of the boot and power management processor. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.18. Android ID:A-34115304. References: N-CVE-2017-0329.
- CVSS 3.0
- 7.0 HIGHCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 2.10% probability · 82th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- psirt@nvidia.com
EPSS moved from 3.9% on 21 September 2026 to 2.1% on 27 October 2026.
References
- http://www.securityfocus.com/bid/97353Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038201
- https://source.android.com/security/bulletin/2017-04-01.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/97353Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038201
- https://source.android.com/security/bulletin/2017-04-01.htmlPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.