“Alert: India’s CERT-In Warns of Critical Android OS Vulnerabilities”
In a recent advisory, India’s Computer Emergency Response Team (CERT-In), operating under the Ministry of Electronics and Information Technology, has raised concerns about several critical vulnerabilities discovered in Android operating systems. These security flaws have the potential to empower malicious hackers with elevated privileges, access to sensitive user data, remote code execution, and the ability to launch denial of service attacks on compromised systems. CERT-In has classified these vulnerabilities as “high severity.”
Affected Android OS Versions
The advisory from CERT-In specifies that these security vulnerabilities can impact devices running Android 11, Android 12, and Android 13.
Source of Vulnerabilities
These vulnerabilities are traced back to flaws in various components, including Framework, System, Google Play system, and Qualcomm components, including closed-source components.
List of Identified Vulnerabilities
The following Common Vulnerabilities and Exposures (CVE) have been identified in these Android operating systems:
– CVE-2022-40534
– CVE-2023-21646
– CVE-2023-21653
– CVE-2023-28538
– CVE-2023-28549
– CVE-2023-28573
– CVE-2023-28581
– CVE-2023-28584
– CVE-2023-33015
– CVE-2023-33016
– CVE-2023-33019
– CVE-2023-33021
– CVE-2023-35658
– CVE-2023-35664
– CVE-2023-35665
– CVE-2023-35666
– CVE-2023-35667
– CVE-2023-35669
– CVE-2023-35670
– CVE-2023-35671
– CVE-2023-35673
– CVE-2023-35674
– CVE-2023-35675
– CVE-2023-35676
– CVE-2023-35677
– CVE-2023-35679
– CVE-2023-35680
– CVE-2023-35681
– CVE-2023-35682
– CVE-2023-35683
– CVE-2023-35684
– CVE-2023-35687
Staying Safe
To safeguard their Android devices, users are strongly encouraged to update their systems promptly. It is essential to apply security updates and patches released by their device manufacturer (OEM) as soon as they become available. These updates typically contain fixes for the identified vulnerabilities, helping to ensure the security of their devices and personal data. Stay safe, stay updated!