CVE-2017-0327: linux linux_kernel Classic Buffer Overflow

Vulnerability summary

CVE-2017-0327 is a high (CVSS 7.6) Classic Buffer Overflow vulnerability in linux linux_kernel. EPSS estimates a 1.84% chance of exploitation in the next 30 days, higher than 78.6% of scored vulnerabilities.

Timeline

1. 05-04-2017
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33893669. References: N-CVE-2017-0327.

• CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.