What’s Vulnerable › Vulnerabilities

CVE-2011-2343

• Severity: low (CVSS 2.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-02-12 · updated 2026-06-16
• Weakness: CWE-200

Description

The Bluetooth stack in Android before 2.3.6 allows a physically proximate attacker to obtain contact information via an AT phonebook transfer.

Affected products

• Android: before 2.3.6 — fixed in 2.3.6

How to fix

Upgrade to a fixed version: Android 2.3.6. Check the vendor advisory for mitigations.

References

• https://code.google.com/p/android/issues/detail?id=21347
• https://deepsec.net/docs/Slides/2013/DeepSec_2013_Jaime_Sanchez_-_Building_The_First_Android_IDS_On_Network_Level.pdf
• https://code.google.com/p/android/issues/detail?id=21347
• https://deepsec.net/docs/Slides/2013/DeepSec_2013_Jaime_Sanchez_-_Building_The_First_Android_IDS_On_Network_Level.pdf

Get alerted when CVE-2011-2343 or the next vulnerability affects your stack