CVE-2017-13258: In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check.

Security readout for executives and security teams

CVE-2017-13258 is an Android flaw that can let a remote attacker read information from memory because a bounds check is missing. It affects Android 5.1.1 through 8.1. The sources state no user interaction or extra privileges are required, but do not provide CVSS scoring or active exploitation evidence. Exposure is most likely in organizations still operating Android 5.1.1 through 8.1 devices or embedded Android builds based on those releases. Current supported Android versions are not listed in the provided affected set. Prioritize remediation for legacy Android fleets and embedded devices. The business risk is meaningful because the flaw is remote, needs no user action, and public exploit references exist, but the evidence provided does not show active exploitation. Mitigation focus: Apply Android vendor updates covering the March 2018 security bulletin.; Inventory devices running Android 5.1.1 through 8.1.; Replace or isolate unsupported Android devices that cannot receive fixes..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.