Alert! Millions of Android Users at Risk of Cyber Attack, CERT-In Issues Warning

India’s Computer Emergency Response Team (CERT-In) has issued a high-priority advisory for Android smartphone users after discovering multiple severe security vulnerabilities in the operating system. These flaws, categorized under unique CVE identifiers, fall into the “high severity” bracket—making devices vulnerable to hacking if not patched promptly.

Which Android Versions Are Affected?

According to the advisory, the vulnerabilities impact Android 13, Android 14, Android 15, and Android 16. The flaws exist across several critical components of the OS, including:

• Android Framework

• Android Runtime

• System Layer

• Widevine DRM

• Project Mainline

• Kernel

• Qualcomm and MediaTek chipsets

With loopholes spread across so many layers, the risk of exploitation has grown significantly.

How Dangerous Is the Threat?

CERT-In has warned that if attackers exploit these flaws, they could:

• Steal sensitive data from the device

• Crash or disable the phone

• Execute arbitrary malicious code

• Gain complete control over the smartphone

In simple terms, everything stored on the device—from photos to banking details—could be exposed.

What’s the Fix?

Google has already released a security patch addressing these vulnerabilities. However, the updates are rolled out by individual smartphone manufacturers such as Samsung (One UI), OnePlus (OxygenOS), and Xiaomi (HyperOS). Users will need to wait for their device brand to push the patch.

What Should Users Do?

• Install updates immediately: If a new security update is available, download and install it without delay.

• Enable automatic updates: This ensures your device gets patched as soon as fixes are released.

• Avoid unofficial apps or links: Until your phone is updated, be extra cautious while downloading apps or opening links.

The government’s message is clear: update your smartphone on time, or risk becoming a victim of cybercriminals.