CVE-2017-0645

MEDIUM

Android <7.1.2 - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2017-0645. PoCs published by heeeeen.

AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2017-0645, targeting a Bluetooth vulnerability in Android. The code includes classes to manipulate Bluetooth file transfers and simulate malicious provider interactions.

Description

An elevation of privilege vulnerability in Bluetooth could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it is a local bypass of user interaction requirements. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35385327.

Exploits (1)

github WORKING POC 5 stars
by heeeeen · javapoc
https://github.com/heeeeen/CVE-PoC/tree/master/CVE-2017-0645

This repository contains a functional proof-of-concept exploit for CVE-2017-0645, targeting a Bluetooth vulnerability in Android. The code includes classes to manipulate Bluetooth file transfers and simulate malicious provider interactions.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Android Bluetooth Stack (versions affected by CVE-2017-0645)
No auth needed
Prerequisites: Bluetooth enabled on target device · Proximity to target device for Bluetooth communication
devstral-2 · analyzed Feb 27, 2026 Full analysis →

References (3)

Core 3
Core References
Vendor Advisory x_refsource_confirm
https://source.android.com/security/bulletin/2017-06-01
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/98871
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1038623

Scores

CVSS v3 5.5
EPSS 0.0044
EPSS Percentile 35.0%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (5)
google/android 6.0.1
google/android 7.0
google/android 7.1.1
google/android 7.1.2
Google Inc./Android Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2
Published Jun 14, 2017
Tracked Since Feb 18, 2026