CVE-2017-13259

HIGH

Android 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 - Out-of-bounds Read in sdp_discovery.cc

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2017-13259. PoCs published by ScottyBauer.

AI-analyzed exploit summary This PoC demonstrates a Bluetooth heap disclosure vulnerability (CVE-2017-13259) by manipulating SDP (Service Discovery Protocol) responses to leak memory contents. It sets up a malicious L2CAP server and advertises a Bluetooth LE device to trigger the vulnerability when a victim device connects.

Description

In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68161546.

Exploits (1)

github WORKING POC 682 stars

by ScottyBauer · cpoc

https://github.com/ScottyBauer/Android_Kernel_CVE_POCs/tree/master/CVE-2017-13259.c

View Code ZIP pw:eip

This PoC demonstrates a Bluetooth heap disclosure vulnerability (CVE-2017-13259) by manipulating SDP (Service Discovery Protocol) responses to leak memory contents. It sets up a malicious L2CAP server and advertises a Bluetooth LE device to trigger the vulnerability when a victim device connects.

Classification

Working Poc 95%

Attack Type

Info Leak

Complexity

Moderate

Reliability

Reliable

Target: Android Kernel (Bluetooth stack)

No auth needed

Prerequisites: Bluetooth-enabled device with vulnerable kernel · Proximity to target device for Bluetooth communication

MITRE ATT&CK

T1005 - Data from Local System T1552 - Unsecured Credentials

devstral-2 · analyzed Feb 27, 2026 Full analysis →

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

https://source.android.com/security/bulletin/2018-03-01

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/103253

Scores

CVSS v3 7.5

EPSS 0.0133

EPSS Percentile 67.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-125

Status published

Products (8)

google/android 5.1.1

google/android 6.0

google/android 6.0.1

google/android 7.0

google/android 7.1.1

google/android 7.1.2

google/android 8.0

google/android 8.1

Published Apr 04, 2018

Tracked Since Feb 18, 2026