Attention Android Users! Update Your Phone Before It’s Too Late, Warns CERT-In

The Indian Computer Emergency Response Team (CERT-In) has issued a high-risk alert for Android users, highlighting vulnerabilities in versions 12 to 15. These flaws could lead to unauthorised access, system instability, and denial of service. Users are urged to update their devices promptly to safeguard against potential threats.

According to CERT-In's vulnerability note CIVN-2024-0349, these issues affect both open-source and proprietary components within the Android ecosystem. The vulnerabilities involve components developed by third-party vendors like Imagination Technologies, MediaTek, and Qualcomm. This broadens the scope of potential risks for users.

Impacted Android Versions

The specific Android versions affected include Android 12, 12L, 13, 14, and 15. These vulnerabilities pose significant concerns for individuals and organisations relying on these systems. CERT-In has categorised these flaws as high-risk due to their potential impact.

If exploited by hackers, these vulnerabilities could result in data breaches where attackers gain access to sensitive information stored on devices. Additionally, they might cause frequent crashes leading to system instability or initiate denial of service attacks that disrupt device functionality.

Protective Measures

CERT-In advises users to update their devices as soon as updates are released by Google and Original Equipment Manufacturers (OEMs). To update an Android phone, users should navigate to System Settings > System Upgrade and apply the available update.

Users are also encouraged to download apps only from trusted sources like the Google Play Store. Sideloading apps from unverified platforms can introduce malware into devices. Activating built-in security features such as app permissions, two-factor authentication (2FA), and device encryption is recommended to enhance security.

Always Remain Vigilant

Remaining vigilant for unusual behaviour on devices is crucial. Signs like unexpected crashes or rapid battery drain may indicate exploitation attempts. Users should be cautious and take immediate action if such symptoms appear.

These measures are essential for maintaining device security amidst the identified vulnerabilities in Android systems. By following CERT-In's recommendations, users can significantly reduce their risk of falling victim to cyber threats targeting these operating systems.