CVE-2017-0646: An information disclosure vulnerability in Bluetooth component could enable a local malicious application t...

Security readout for executives and security teams

CVE-2017-0646 is an Android Bluetooth information disclosure issue. A local malicious app could read data beyond its normal permission level. The business impact is mainly privacy and sensitive-data exposure on older or unpatched Android devices, not remote network compromise based on the provided sources. Exposure is most likely on legacy Android devices or vendor builds that did not receive the June 2017 Android security bulletin fixes. Managed fleets with unsupported Android 4.x, 5.x, 6.x, or early 7.x devices should be treated as potentially exposed until patch status is verified. Medium priority for modern fleets, higher where old Android devices remain in production. This is not evidenced as remotely exploitable or actively exploited, but it can undermine app permission boundaries and expose data on affected devices. Mitigation focus: Apply Android vendor updates that include the June 2017 security bulletin fixes.; Retire or isolate unsupported Android versions that cannot receive vendor fixes.; Restrict installation of untrusted apps through MDM or enterprise app controls..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.