CVE-2011-0680: data/WorkingMessage.java in the Mms application in Android before 2.2.2 and 2.3.x before 2.3.2 does not pro...

Security readout for executives and security teams

This is an old Android SMS privacy flaw. On Android before 2.2.2 and Android 2.3.x before 2.3.2, the MMS app could mishandle its draft cache, allowing an SMS intended for one recipient to be exposed to another in opportunistic circumstances. Exposure is most likely limited to legacy Android devices running versions earlier than 2.2.2, or Android 2.3.x earlier than 2.3.2, especially unmanaged or long-retired devices still used for SMS. Treat this as a legacy-device privacy risk, not a modern enterprise-wide emergency. Prioritize discovery and removal of unsupported Android phones that still process business or regulated SMS messages. Mitigation focus: Update affected Android devices to 2.2.2, 2.3.2, or later vendor-supported firmware.; Retire devices that cannot receive vendor or carrier firmware updates.; Avoid sending sensitive SMS content from impacted devices until remediation is confirmed..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.