medium6.5Public exploit code
CVE-2017-13262
In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Android Bluetooth - BNEP BNEP_SETUP_CONNECTION_REQUEST_MSG Out-of-Bounds Read2018-03-23 · dos · android
- Android Bluetooth - BNEP bnep_data_ind() Remote Heap Disclosure2018-03-23 · dos · android
Impact
In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69271284.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | Versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/103253
- https://source.android.com/security/bulletin/2018-03-01
- https://www.exploit-db.com/exploits/44326/
- https://www.exploit-db.com/exploits/44327/
- http://www.securityfocus.com/bid/103253
- https://source.android.com/security/bulletin/2018-03-01
- https://www.exploit-db.com/exploits/44326/
- https://www.exploit-db.com/exploits/44327/