CVE-2017-0330

MediumCVSS 4.7/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33899858. References: N-CVE-2017-0330.

Metrics

CVSS 3.0 4.7/10CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
Nvidia Corporation	Android	Kernel-3.10

References

http://www.securityfocus.com/bid/97347Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038201
https://nvidia.custhelp.com/app/answers/detail/a_id/4787
https://source.android.com/security/bulletin/2017-04-01.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/97347Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038201
https://nvidia.custhelp.com/app/answers/detail/a_id/4787
https://source.android.com/security/bulletin/2017-04-01.htmlPatch, Vendor Advisory

Timeline

Published: Apr 5, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-03317.8An elevation of privilege vulnerability in the NVIDIA video driver could enable a local malicious application to execute arbitrary code with CVE-2017-03327.0An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code wit CVE-2017-03337.8An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within CVE-2017-03345.5An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its pe CVE-2017-03357.8An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within CVE-2017-03365.5An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its pe CVE-2017-03377.8An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within CVE-2017-03387.8An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within CVE-2017-03397.0An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code wit CVE-2017-03407.8An elevation of privilege vulnerability in the NVIDIA Libnvparser component due to a memcpy into a fixed sized buffer with a user-controlled CVE-2017-03417.8All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEsca CVE-2017-03427.8All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where incorrec