• Source:JND
Add as a preferred

Computer Emergency Response Team India (CERT-In) issued a high-risk advisory alerting smartphone users about multiple vulnerabilities within Android OS releases that may put devices under attacker control if unpatched. This warning also covers newer releases which may also have vulnerabilities impacting them.

Multiple Vulnerabilities Detected Across Android

The critically flawed areas of Android range from the device's mediaserver and the system clock to its mediaserver.

  • Framework
  • Android Runtime
  • System
  • Widevine DRM
  • Project Mainline components
  • Kernel
  • Arm components
  • Imagination Technologies
  • MediaTek components
  • Qualcomm components (including closed-source parts)

The manner in which the vulnerabilities have been categorized by the agency is “High” severity and attackers who manage to exploit them could:

  • Gain elevated privileges
  • Steal sensitive information
  • Execute arbitrary code
  • Cause denial-of-service (DoS) conditions on targeted devices

The advisory specifically cautions users of Android 13, Android 14, Android 15 and the newest Android 16.

Patches Already Released

Google, which develops Android, has already released security updates fixing all of the vulnerabilities flagged. But because of how the Android ecosystem functions, updates need to be pushed out by smartphone manufacturers too – Samsung (One UI), OnePlus (OxygenOS), Xiaomi (HyperOS) and so on – before reaching users.

CERT-In said that most users would have now received the fix, but urged all users to download and install the update as soon as possible so as to not be at risk.

Why Does It Matters?

This find really shows how much of a back-and-forth there is between cybersecurity folks and those with bad intentions, especially when it comes to mobile operating system weaknesses that are extra risky. Our phones hold so much personal stuff—data, money, conversations—and if they're not secure, millions could be at risk from cyberattacks.

ALSO READ: iPhone 17 Series Cases Leak Ahead Of Launch, Hinting At Design Changes

What Users Should Do?

To avoid this kind of threat, Android users must:

  • Go to settings, look for a system update and install the new patch
  • Do not download apps from unknown sources
  • Beware of suspicious links or messages
  • Turn on Google Play Protect and other security features built into your device

Since both CERT-In and Google have been adamant about the criticality of this patch, the best way to ensure your device is safe against potential threats is to install the latest patch.

Also In News