CVE-2017-0639: An information disclosure vulnerability in Bluetooth component could enable a local malicious application t...

Security readout for executives and security teams

CVE-2017-0639 is an Android Bluetooth information disclosure issue. A malicious app already running on an affected device could access data beyond its normal permissions, undermining app isolation. The business concern is legacy Android device exposure, especially unmanaged or unsupported devices that cannot receive Android security updates. Exposure is most likely on older Android devices in the listed version range that did not receive the June 2017 Android security bulletin fixes or OEM-equivalent updates. Prioritize remediation where legacy Android devices handle sensitive corporate data or operate outside strong MDM control. This is not a network-worm issue, but it weakens mobile data isolation if a malicious app reaches the device. Mitigation focus: Identify Android devices running affected versions.; Apply Android or OEM updates covering the June 2017 security bulletin.; Retire or isolate unsupported devices that cannot be updated..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.