CVE-2017-13255:

Out-of-bounds write vulnerability in Android's Bluetooth SDP server component allowing remote code execution without user interaction.

This vulnerability (CWE-787: Out-of-bounds Write) in Android's Bluetooth stack allows an attacker within Bluetooth range to execute arbitrary code on the target device. The issue occurs in the Service Discovery Protocol (SDP) server component when processing service attribute requests. Due to improper bounds checking in the process_service_attr_req function in sdp_server.c, an attacker can trigger an out-of-bounds write, potentially leading to memory corruption and code execution. The attack can be performed remotely without user interaction, making this vulnerability particularly dangerous. An attacker could exploit this vulnerability to gain control of an affected device, access sensitive data, or perform other malicious actions with the privileges of the Bluetooth service.