CVE-2017-13259: Google Android

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68161546.

Affected products

• Google Android: version 5.1.1 only; version 6.0 only; version 6.0.1 only; version 7.0 only; version 7.1.1 only; version 7.1.2 only; …

Published 2018-04-04. Last modified 2026-06-17.