# CVE-2017-0785

A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146698.

- Page: https://www.vulneraibility.com/cve/CVE-2017-0785
- CVSS: 6.5
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 12.39% (percentile 96.3)
- Public exploit code: 1 on Exploit-DB · 10 GitHub proofs of concept (first 2017-09-20)
- Published: 2017-09-14

## Affected versions

- Google Inc. Android: affected 4.4.4; 5.0.2; 5.1.1; 6.0; 6.0.1; 7.0; 7.1.1; 7.1.2; 8.0

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- [other] http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
- [other] https://source.android.com/security/bulletin/2017-09-01
- [other] http://www.securitytracker.com/id/1041300
- [other] http://www.securityfocus.com/bid/100812

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.