CVE-2017-0785

MEDIUM

Android 4.4.4-8.0 - Information Disclosure via Bluetooth

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 15 public exploits for CVE-2017-0785. PoCs published by Kert Ojasoo, ojasookert, Alfa100001.

AI-analyzed exploit summary This exploit targets CVE-2017-0785, a stack information leak vulnerability in Android's Bluetooth stack. It connects to the target via L2CAP and sends crafted packets to leak stack memory contents.

Description

A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146698.

Exploits (15)

exploitdb WORKING POC
by Kert Ojasoo · pythonremoteandroid
https://www.exploit-db.com/exploits/44555

This exploit targets CVE-2017-0785, a stack information leak vulnerability in Android's Bluetooth stack. It connects to the target via L2CAP and sends crafted packets to leak stack memory contents.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Android Bluetooth stack (versions affected by CVE-2017-0785)
No auth needed
Prerequisites: Bluetooth connectivity to the target device · Target device must have Bluetooth enabled and be discoverable
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WORKING POC 472 stars
by ojasookert · poc
https://github.com/ojasookert/CVE-2017-0785

This repository contains a functional PoC for CVE-2017-0785, an Android Bluetooth information leak vulnerability. The script exploits a flaw in the Bluetooth stack to leak memory contents via crafted L2CAP packets.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Android Bluetooth stack (versions affected by CVE-2017-0785)
No auth needed
Prerequisites: Bluetooth connectivity to target device · Python with pybluez and pwntools
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec WORKING POC 39 stars
by Alfa100001 · poc
https://github.com/Alfa100001/-CVE-2017-0785-BlueBorne-PoC

The repository contains a functional Python exploit for CVE-2017-0785, a BlueBorne vulnerability affecting Bluetooth implementations. The PoC demonstrates an information leak by crafting malicious L2CAP packets to extract stack data from the target device.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Bluetooth implementations (Linux kernel, Android, etc.)
No auth needed
Prerequisites: Bluetooth enabled on target device · Target device within Bluetooth range · Python with `pwntools` and `bluetooth` libraries
devstral-2 · analyzed Feb 18, 2026 Full analysis →
github WORKING POC 38 stars
by Miracle963 · pythonpoc
https://github.com/Miracle963/bluetooth-cve/tree/master/CVE-2017-0785

This repository contains a functional PoC exploit for CVE-2017-0785, an information leak vulnerability in Android's Bluetooth stack. The exploit uses crafted L2CAP packets to leak memory contents from the target device.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Android Bluetooth stack (versions affected by BlueBorne)
No auth needed
Prerequisites: Bluetooth connectivity to target device · Python with pybluez and pwntools libraries
devstral-2 · analyzed Feb 27, 2026 Full analysis →
nomisec WORKING POC 31 stars
by pieterbork · poc
https://github.com/pieterbork/blueborne

This repository contains a functional exploit for CVE-2017-0785, part of the BlueBorne vulnerability set, which targets Bluetooth implementations. The exploit includes a scanner to identify vulnerable devices and a PoC that triggers the vulnerability, resulting in a hex dump of leaked memory if successful.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Bluetooth implementations (various vendors)
No auth needed
Prerequisites: Bluetooth connectivity to target device · Target device must be vulnerable to CVE-2017-0785
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec WORKING POC 1 stars
by MasterCode112 · poc
https://github.com/MasterCode112/Upgraded_BlueBourne-CVE-2017-0785-

This repository contains a functional Python3 exploit for CVE-2017-0785 (BlueBourne), which targets a Bluetooth stack vulnerability in Linux kernels. The exploit sends crafted L2CAP packets to leak stack memory from the target device.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Linux kernel (Bluetooth stack)
No auth needed
Prerequisites: Bluetooth connectivity to target · Target device with vulnerable Linux kernel
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec STUB 1 stars
by CyberKimathi · poc
https://github.com/CyberKimathi/Py3-CVE-2017-0785

The repository contains only a minimal README with no functional exploit code or technical details. It appears to be a placeholder without substantive content.

Classification
Stub 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: unknown
No auth needed
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec WORKING POC 1 stars
by RavSS · poc
https://github.com/RavSS/Bluetooth-Crash-CVE-2017-0785

This repository contains a functional Python script that exploits CVE-2017-0785, a Bluetooth SDP protocol vulnerability causing a DoS (crash) on Android devices above version 4.0 by sending malformed packets. The script uses the `bluetooth` and `pwn` libraries to flood the target with crafted packets, triggering an out-of-bounds read and subsequent crash.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Android Bluetooth module (versions above 4.0)
No auth needed
Prerequisites: Bluetooth connectivity to the target device · Python 2.x environment with `bluetooth` and `pwn` libraries
devstral-2 · analyzed Feb 18, 2026 Full analysis →
gitlab WORKING POC
by Dasey · poc
https://gitlab.com/Dasey/CVE-2017-0785-Android-memory-leak-reverse-ascii

This script processes the output of a memory leak exploit for CVE-2017-0785, reversing byte order and cleaning ASCII data from a Bluetooth-based memory dump. It is part of a post-exploitation toolchain for the Blueborne vulnerability.

Classification
Working Poc 80%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Android (Bluetooth stack)
No auth needed
Prerequisites: Memory dump file (dump.txt) from CVE-2017-0785 exploit
devstral-2 · analyzed Feb 23, 2026 Full analysis →
gitlab WORKING POC
by glicOne · poc
https://gitlab.com/glicOne/CVE-2017-0785

This PoC exploits CVE-2017-0785, an information leak vulnerability in Android's Bluetooth stack (BlueBorne). It connects to a target device via L2CAP and leaks stack memory by manipulating continuation states in Bluetooth packets.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Android Bluetooth stack (versions affected by BlueBorne)
No auth needed
Prerequisites: Bluetooth connectivity to target device · Target device vulnerable to BlueBorne (CVE-2017-0785) · Python with pybluez and pwntools installed
devstral-2 · analyzed Feb 23, 2026 Full analysis →
gitlab WORKING POC
by sidhex · poc
https://gitlab.com/sidhex/CVE-2017-0785

This repository contains a functional PoC for CVE-2017-0785, an Android Bluetooth information leak vulnerability. The script exploits a stack leak via crafted L2CAP packets to dump memory contents from the target device.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Android (Bluetooth stack, Blueborne vulnerability)
No auth needed
Prerequisites: Bluetooth connectivity to target device · Python with pybluez and pwntools libraries
devstral-2 · analyzed Feb 23, 2026 Full analysis →
nomisec WORKING POC
by Richard1031 · poc
https://github.com/Richard1031/CVE-2017-0785-PoC

This repository contains a functional Python exploit for CVE-2017-0785, which targets a Bluetooth stack information leak vulnerability in Android devices. The PoC uses L2CAP packets to trigger unintended memory leakage and dumps the leaked content to a file.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Android Bluetooth stack (versions affected by CVE-2017-0785)
No auth needed
Prerequisites: Bluetooth connectivity to the target device · Target device must have Bluetooth enabled and be discoverable
devstral-2 · analyzed Feb 19, 2026 Full analysis →
nomisec WORKING POC
by sh4rknado · poc
https://github.com/sh4rknado/BlueBorn

This repository contains a functional exploit for CVE-2017-0785, a Bluetooth stack information leak vulnerability in Linux kernels. The PoC uses Python with the PyBluez library to craft L2CAP packets and extract stack memory from a vulnerable target device.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Linux kernel (Bluetooth stack) versions prior to the fix for CVE-2017-0785
No auth needed
Prerequisites: Bluetooth connectivity to the target device · Target device must have Bluetooth enabled and be discoverable
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec STUB
by sigbitsadmin · poc
https://github.com/sigbitsadmin/diff

The repository contains a simple file comparison tool (diff.py) and a minimal README, but no actual exploit code or technical details related to CVE-2017-0785. The tool itself is unrelated to the vulnerability.

Classification
Stub 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: Unknown (no specific software mentioned)
No auth needed
Prerequisites: None (no exploit code present)
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec WORKING POC
by aymankhalfatni · poc
https://github.com/aymankhalfatni/CVE-2017-0785

This PoC exploits CVE-2017-0785, an Android Bluetooth stack information leak vulnerability, by sending crafted L2CAP packets to dump stack memory from a vulnerable device. The script uses pybluez and pwntools to interact with the target Bluetooth device and extract data.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Android Bluetooth stack (versions affected by CVE-2017-0785)
No auth needed
Prerequisites: Bluetooth connectivity to target device · pybluez and pwntools installed
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (5)

Core 5
Core References
Patch, Vendor Advisory x_refsource_confirm
https://source.android.com/security/bulletin/2017-09-01
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1041300
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/100812

Scores

CVSS v3 6.5
EPSS 0.1239
EPSS Percentile 95.7%
Attack Vector ADJACENT_NETWORK
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (39)
google/android 4.0
google/android 4.0.1
google/android 4.0.2
google/android 4.0.3
google/android 4.0.4
google/android 4.1
google/android 4.1.2
google/android 4.2
google/android 4.2.1
google/android 4.2.2
... and 29 more
Published Sep 14, 2017
Tracked Since Feb 18, 2026