CVE-2017-0448: An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious applicati...

Security readout for executives and security teams

CVE-2017-0448 is an Android information disclosure issue in the NVIDIA video driver. A malicious local app could read data outside its intended permission boundaries. The source rates the issue High because it could expose sensitive data without explicit user permission. Exposure is most likely on older Android devices or builds using Kernel-3.10 and the affected NVIDIA video driver. Internet-facing exposure is not indicated; the source describes a local malicious application requirement. Treat this as important for legacy Android fleets, especially devices handling sensitive data. Priority is lower for fully patched or modern devices, but unsupported affected devices should be removed from trusted environments. Mitigation focus: Apply the relevant Android security update from the 2017-02-01 bulletin where available.; Check device OEM guidance for affected Android Kernel-3.10 builds.; Retire or isolate unsupported devices that cannot receive vendor fixes..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.