CVE-2011-3975: A certain HTC update for Android 2.3.4 build GRJ22, when the Sense interface is used on the HTC EVO 3D, EVO...

Security readout for executives and security teams

This is an old HTC Android information-disclosure issue. Certain HTC Sense devices shipped an HTC logging app that could expose phone numbers and other sensitive data to another installed app with Internet permission. The main business concern is privacy exposure on legacy mobile devices, not broad server compromise. Exposure is likely limited to legacy HTC devices running the affected Android 2.3.4 GRJ22 HTC Sense update with HtcLoggers.apk present. Modern fleets are unlikely to be exposed unless old personal or unmanaged devices still access business data. Treat this as a legacy mobile privacy risk. Prioritize only if old HTC Android devices can still reach business data. The practical response is asset cleanup, device retirement, and mobile access control rather than emergency incident response. Mitigation focus: Inventory HTC Android devices still accessing corporate email, VPN, or managed apps.; Check HTC or carrier guidance for firmware updates or removal instructions.; Retire or isolate unsupported affected devices from corporate services..

Prepared

Jun 27, 2026, 18:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.