Government has a critical warning for these Android users – ET CISO
https://etimg.etb2bimg.com/thumb/msid-118050475,imgsize-28748,width-1200,height=765,overlay-etciso/cybercrime-fraud/government-has-a-critical-warning-for-these-android-users.jpg
The government’s cybersecurity watchdog, the Indian Computer Emergency Response Team (CERT-In) has issued a high-risk security advisory regarding multiple vulnerabilities found in Android systems. These security flaws can allow attackers to gain unauthorised access, execute arbitrary code, and destabilise systems, potentially leading to privilege escalation, data theft, and denial-of-service (DoS) attacks. CERT-In’s advisory (CIVN-2025-0013) also highlighted that one of the vulnerabilities (CVE-2024-53104) is already being actively exploited. CERT-In has also warned that these vulnerabilities have affected Android versions 12, 12L, 13, 14 and 15. Hackers can use these security flaws to target all OEMs and Android users running these versions of the software.
How these security flaws came into existence
In its warning, Cert-In explained: “Multiple vulnerabilities exist in Android due to flaws in the Framework, Platform, System, Conscrypt component, Kernel, Arm components, Imagination Technologies, MediaTek components, Unisoc components, Qualcomm components and Qualcomm closed-source components. Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive information, gain elevated privileges, execute arbitrary code or cause denial of service (DoS) conditions on the targeted system.”
How users can stay protected
CERT-In advises users and OEMs to install security updates promptly upon release. The latest security patches are available in the Android Security Bulletin. To enhance security, users should also follow these best practices:
- Keep your device updated: Install the latest security patches to protect against vulnerabilities.
- Download apps from trusted sources: Use the Google Play Store and avoid third-party or unknown sources.
- Enable Google Play Protect: Enable it to detect and block potentially harmful apps.
- Review app permissions: Restrict unnecessary access to your data.
- Be careful with links: Avoid clicking on suspicious links in emails or messages.
- Back up your data regularly: Store backups securely in the cloud or on external storage.