CVE-2017-0645: An elevation of privilege vulnerability in Bluetooth could enable a local malicious application to access d...

Security readout for executives and security teams

CVE-2017-0645 is an Android Bluetooth privilege issue. A malicious app already running locally on a vulnerable device could access data beyond its allowed permissions. Google rated it Moderate because it bypasses user interaction requirements but still requires local app execution. Exposure is limited to legacy Android devices on affected versions that did not receive the relevant Android security bulletin or vendor security update. Enterprise risk is higher where unmanaged Android devices can install untrusted applications. Treat as a legacy Android hygiene issue, not an emergency internet-facing crisis. Prioritize if the organization still permits old Android devices, BYOD access, or sideloaded applications handling business data. Mitigation focus: Apply the Android June 2017 security bulletin fixes or later vendor security updates.; Replace or isolate devices that cannot receive Android security updates.; Restrict installation of untrusted or sideloaded applications on managed Android devices..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.