CVE-2017-0634

CVE-2017-0634 is an information disclosure vulnerability affecting the Synaptics touchscreen driver in Android devices running Kernel-3.18. A local malicious application could exploit this to access data beyond its authorized permissions. Rated Medium with a CVSS score of 4.7, exploitation requires user interaction and a high attack complexity, as it first necessitates compromising a privileged process. The primary impact is a high risk of confidentiality compromise. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei. The vulnerability has received minimal community attention and media coverage, suggesting a low profile.