What is CVE-2011-4276?

CVE-2011-4276 is a vulnerability in Google Android, classified under Information Disclosure. Published 2012-01-25.

Is CVE-2011-4276 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Information disclosure in Google Android

CVE-2011-4276

The Bluetooth service (com/android/phone/BluetoothHeadsetService.java) in Android 2.3 before 2.3.6 allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer.

Vulnerability class: Information Disclosure

EPSS: 0.006 (44.2th percentile) — read the EPSS interpretation.

Affected products

Google Android — versions 2.3, 2.3.3, 2.3.4
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

Public proof-of-concept exploits

ksparakis/apekit

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2011-4276?: CVE-2011-4276 is a vulnerability in Google Android, classified under Information Disclosure. Published 2012-01-25.
Is CVE-2011-4276 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.