CVE-2017-0781

HIGH

Android 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 8.0 - Remote Code Execution in Bluetooth

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 12 public exploits for CVE-2017-0781. PoCs published by Marcin Kozlowski, Kert Ojasoo, qazbnm456.

AI-analyzed exploit summary This exploit leverages CVE-2017-0781 (Blueborne) to achieve remote code execution on LineageOS 14.1 (Android 7.1.2) via Bluetooth stack memory corruption. It performs a stack memory leak, calculates addresses, and executes a payload to create a file in /data/local/tmp/.

Description

A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146105.

Exploits (12)

exploitdb WORKING POC
by Marcin Kozlowski · textremoteandroid
https://www.exploit-db.com/exploits/44415

This exploit leverages CVE-2017-0781 (Blueborne) to achieve remote code execution on LineageOS 14.1 (Android 7.1.2) via Bluetooth stack memory corruption. It performs a stack memory leak, calculates addresses, and executes a payload to create a file in /data/local/tmp/.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Complex
Reliability
Reliable
Target: LineageOS 14.1 (Android 7.1.2) without BlueBorne patch
No auth needed
Prerequisites: Bluetooth enabled on target device · Target device within Bluetooth range · Unpatched LineageOS 14.1 (Android 7.1.2)
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC
by Kert Ojasoo · pythonremoteandroid
https://www.exploit-db.com/exploits/44554

This exploit targets CVE-2017-0781, a buffer overflow vulnerability in the BNEP (Bluetooth Network Encapsulation Protocol) implementation on Android devices. It sends malformed BNEP packets to trigger a denial-of-service (DoS) condition or potential remote code execution (RCE) on vulnerable devices.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Android Bluetooth Stack (versions prior to 2017-09-01 security patch level)
No auth needed
Prerequisites: Bluetooth connectivity to the target device · Target device with vulnerable BNEP implementation
devstral-2 · analyzed Feb 16, 2026 Full analysis →
github WRITEUP 3,480 stars
by qazbnm456 · poc
https://github.com/qazbnm456/awesome-cve-poc/tree/master/CVE-2017-0781.md

This repository provides references and links to external resources detailing CVE-2017-0781, a BlueBorne vulnerability affecting Android devices. It includes links to PoC scripts and technical writeups but does not contain direct exploit code.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: Android (6.0.1 and others)
No auth needed
Prerequisites: Bluetooth-enabled Android device · Proximity to target device
devstral-2 · analyzed Feb 27, 2026 Full analysis →
nomisec WORKING POC 143 stars
by ojasookert · poc
https://github.com/ojasookert/CVE-2017-0781

This repository contains a functional PoC for CVE-2017-0781, a Bluetooth BNEP heap overflow vulnerability in Android. The exploit sends malformed BNEP packets to crash the Bluetooth service, demonstrating the vulnerability described in the Blueborne whitepaper.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Android Bluetooth stack (BNEP implementation)
No auth needed
Prerequisites: Bluetooth-enabled Android device · PyBluez and pwntools libraries · Bluetooth adapter on attacker machine
devstral-2 · analyzed Feb 18, 2026 Full analysis →
github WORKING POC 38 stars
by Miracle963 · pythonpoc
https://github.com/Miracle963/bluetooth-cve/tree/master/CVE-2017-0781

This repository contains a functional PoC for CVE-2017-0781, a Bluetooth heap overflow vulnerability in Android. The exploit sends malformed BNEP packets to crash the Bluetooth service, demonstrating the vulnerability described in the Blueborne whitepaper.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Android Bluetooth stack (versions affected by CVE-2017-0781)
No auth needed
Prerequisites: Bluetooth-enabled host with Python and PyBluez · Target Android device with Bluetooth enabled and vulnerable stack
devstral-2 · analyzed Feb 27, 2026 Full analysis →
github WRITEUP 14 stars
by xbl3 · poc
https://github.com/xbl3/awesome-cve-poc_qazbnm456/tree/master/CVE-2017-0781.md

This repository provides references and links to external resources detailing CVE-2017-0781, a BlueBorne vulnerability affecting Android devices. It includes technical analysis and PoC scripts from Armis Labs but does not contain direct exploit code.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Android 6.0.1 and earlier
No auth needed
Prerequisites: Bluetooth enabled on target device · Proximity to target device
devstral-2 · analyzed Feb 27, 2026 Full analysis →
nomisec WORKING POC 9 stars
by CrackSoft900 · poc
https://github.com/CrackSoft900/Blue-Borne

This repository contains a functional exploit for CVE-2017-0781, targeting Android's BlueBorne vulnerability. It includes code for achieving remote code execution (RCE) on vulnerable Android devices by leveraging Bluetooth vulnerabilities and bypassing ASLR via an SDP information leak (CVE-2017-0785).

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Complex
Reliability
Reliable
Target: Android (Google Pixel, Nexus 5X) with Bluetooth stack (Bluedroid) on versions 7.1.2 with Security Patch Level July or August 2017
No auth needed
Prerequisites: CSR USB Bluetooth adapter (or alternative with MAC address spoofing capability) · Python 2 with pybluez and pwn libraries · Accessible attacker IP from the victim device
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec WORKING POC 1 stars
by DamianSuess · poc
https://github.com/DamianSuess/Learn.BlueJam

This repository contains a functional PoC for CVE-2017-0781, a Bluetooth heap overflow vulnerability in Android. The exploit sends malformed BNEP packets to crash the Bluetooth service, demonstrating the vulnerability's impact.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Android Bluetooth stack (versions affected by CVE-2017-0781)
No auth needed
Prerequisites: Bluetooth-enabled Linux host (Kali Linux recommended) · Target Android device with Bluetooth enabled · PyBluez and pwntools installed
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec WORKING POC 1 stars
by CarlosDelRosario7 · poc
https://github.com/CarlosDelRosario7/sploit-bX

This repository provides a bash script that automates the installation of two Bluetooth exploits (CVE-2017-0781 and CVE-2017-0785) by cloning their respective GitHub repositories and setting up the necessary dependencies. The script modifies the original exploit scripts to accept a target MAC address as a command-line argument.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Bluetooth stack on Android devices (versions 4.4.4 to 8.0)
No auth needed
Prerequisites: Physical proximity to the target device · Bluetooth enabled on the target device
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec SCANNER 1 stars
by mjancek · poc
https://github.com/mjancek/BlueborneDetection

This repository contains a scanner for CVE-2017-0781 (Blueborne) that detects vulnerability in Android devices by sending crafted BNEP packets over Bluetooth L2CAP. It does not exploit the vulnerability but checks for potential crashes indicating susceptibility.

Classification
Scanner 95%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Android Bluetooth stack (BNEP implementation)
No auth needed
Prerequisites: Bluetooth connectivity to target device · MAC address of target device
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec WORKING POC 1 stars
by X3eRo0 · poc
https://github.com/X3eRo0/android712-blueborne

This repository contains a functional exploit for CVE-2017-0781, leveraging a memory leak (CVE-2017-0785) to bypass ASLR and achieve remote code execution via Bluetooth on Android 7.1.2. The PoC includes scripts to leak memory addresses and execute arbitrary commands, such as creating a file or establishing a reverse shell.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Complex
Reliability
Reliable
Target: Android 7.1.2 (Bluedroid Bluetooth stack)
No auth needed
Prerequisites: Bluetooth enabled on target device · Target device within Bluetooth range · Target device running unpatched Android 7.1.2
devstral-2 · analyzed Feb 18, 2026 Full analysis →
gitlab WORKING POC
by anonymous.prodject · poc
https://gitlab.com/anonymous.prodject/CVE-2017-0781

This repository contains a functional PoC for CVE-2017-0781, a heap overflow vulnerability in Android's Bluetooth BNEP service. The exploit sends malformed BNEP packets to crash the Bluetooth service, demonstrating the vulnerability described in the Blueborne whitepaper.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Android Bluetooth BNEP service (versions affected by CVE-2017-0781)
No auth needed
Prerequisites: Bluetooth-enabled host with Python and pwntools/pybluez · Target Android device with Bluetooth enabled and vulnerable BNEP service
devstral-2 · analyzed Feb 23, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/44415/
Patch, Vendor Advisory x_refsource_confirm
https://source.android.com/security/bulletin/2017-09-01
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/100810

Scores

CVSS v3 8.8
EPSS 0.2399
EPSS Percentile 97.6%
Attack Vector ADJACENT_NETWORK
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (39)
google/android 4.0
google/android 4.0.1
google/android 4.0.2
google/android 4.0.3
google/android 4.0.4
google/android 4.1
google/android 4.1.2
google/android 4.2
google/android 4.2.1
google/android 4.2.2
... and 29 more
Published Sep 14, 2017
Tracked Since Feb 18, 2026