Android 15 users beware, govt has issues a high risk warning and you should not ignore it

The Indian Computer Emergency Response Team has flagged critical vulnerabilities in Android 12 to 15, urging users to update their devices.

In Short

• CERT-In issues warning for Android 15 users
• The warning is related to multiple vulnerabilities
• Users are asked to update their devices to protect them from hackers

The Indian Computer Emergency Response Team has issued a high-risk warning for Android users again. This time, the warning particularly targets those using the latest Android 15. According to the government’s cybersecurity agency, multiple vulnerabilities have been found in the Android operating system, which, if exploited, could pose severe threats to users’ devices. These include unauthorised access to sensitive information, system instability, and even complete denial of service. In short, hackers could exploit these vulnerabilities to hack into your Android smartphone or tablet.

CERT-In has flagged these critical vulnerabilities in the Android operating system in its latest vulnerability note – CIVN-2024-0349. In the report, the government agency outlines critical vulnerabilities in Android versions from the older Android 12 to the latest Android 15. Cert-In has even marked these flaws as high-risk, meaning it pose significant concerns for both individual users and organisations relying on Android devices.

Impacted Android version

Here is the list of Android versions impacted by the flagged flaws:

• Android 12
• Android 12L
• Android 13
• Android 14
• Android 15

Further explaining the issues, CERT-In notes that the flagged vulnerabilities in the Android software stem from various components within the Android ecosystem, including those developed by third-party vendors such as Imagination Technologies, MediaTek, and Qualcomm. Both open-source and proprietary components are impacted by these flaws, increasing the complexity and scope of the vulnerabilities.

If exploited successfully by hackers, these vulnerabilities could allow them to:

Data breach: Attackers could gain unauthorized access to personal or corporate data stored on affected devices.

Cause system instability: Exploiting these vulnerabilities could lead to frequent crashes, rendering devices unreliable.

Initiate denial of service (DoS) attacks: Attackers may cause devices to enter a DoS state, effectively disrupting their functionality.

To protect their systems, CERT-In has advised users to update their Android devices as soon as possible once updates are released by Google and the respective Original Equipment Manufacturers (OEMs).

Once the update is released, users can update their Android phones by going to System Settings > System Upgrade and initiating the available update.

Additionally, it is advisable for users to:

• Download apps only from trusted sources, such as the Google Play Store. Avoid sideloading apps from unverified platforms, as they may contain malware.
• Activate built-in security features, such as app permissions, two-factor authentication (2FA), and device encryption, to reduce exposure.
• Stay vigilant for unusual behavior, such as unexpected crashes or rapid battery drain, which may indicate potential exploitation.