Unscored severity · published Oct 3, 2011
CVE-2011-3975
A certain HTC update for Android 2.3.4 build GRJ22, when the Sense interface is used on the HTC EVO 3D, EVO 4G, ThunderBolt, and unspecified other devices, provides the…
–
CVSS
1%
EPSS
No
On KEV
Description
A certain HTC update for Android 2.3.4 build GRJ22, when the Sense interface is used on the HTC EVO 3D, EVO 4G, ThunderBolt, and unspecified other devices, provides the HtcLoggers.apk application, which allows user-assisted remote attackers to obtain a list of telephone numbers from a log, and other sensitive information, by leveraging the android.permission.INTERNET application permission and establishing TCP sessions to 127.0.0.1 on port 65511 and a second port.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Android · Google
2.3.4 · source: NVD
E3
Evo 3d · Htc
All versions, or not specified · source: NVD
E4
Evo 4g · Htc
All versions, or not specified · source: NVD
TH
Thunderbolt · Htc
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3975
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3975
news.cnet.com
http://news.cnet.com/8301-1035_3-20114556-94/
www.androidpolice.com
http://www.androidpolice.com/2011/10/01/massive-security-vulnerability-in-htc-android-devices-evo-3d-4g-thunderbolt-others-exposes-phone-numbers-gps-sms-emails-addresses-much-more/
www.securityfocus.com
http://www.securityfocus.com/bid/49916
www.thetechherald.com
http://www.thetechherald.com/article.php/201140/7676/HTC-looking-into-vulnerability-reports
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/70270
More from Android
9.6
CVE-2020-16010
Google Chrome for Android UI Heap Buffer Overflow Vulnerability
8.8
CVE-2026-58704
Google Pixel Improper Authorization Vulnerability
8.8
CVE-2025-48543
Android Runtime Use-After-Free Vulnerability
8.4
CVE-2025-48595
Android Framework Integer Overflow Vulnerability
7.8
CVE-2025-48572
Android Framework Privilege Escalation Vulnerability