CVE-2017-0448
MEDIUMGoogle Android < 7.1.1 - Information Disclosure
Title source: ruleDescription
An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10. Android ID: A-32721029. References: N-CVE-2017-0448.
Scores
CVSS v3
5.5
EPSS
0.0011
EPSS Percentile
29.1%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Classification
CWE
CWE-200
Status
published
Affected Products (3)
google/android
< 7.1.1
linux/linux_kernel
Google Inc./Android
< Kernel-3.10
Timeline
Published
Feb 08, 2017
Tracked Since
Feb 18, 2026