CVE-2017-0329

CVE-2017-0329 is an elevation of privilege vulnerability affecting the NVIDIA boot and power management processor driver in Android devices running Linux Kernel 3.18. A local malicious application could exploit this to execute arbitrary code within the boot and power management processor, but it first requires compromising a privileged process. Rated High with a CVSS score of 7.0, this vulnerability has a local attack vector and high attack complexity, as user interaction is required and a privileged process must already be compromised. Successful exploitation could lead to high impacts on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. The vulnerability has received minimal community discussion or media coverage.