CERT-In flags new vulnerabilities in millions of Android phones

Affected include phones with Android versions 15, 14, 13, 12, and 12L.

With more than three billion users, Android commands an envious 70-plus per cent market share globally. But, it also draws the attention of cyber criminals to prey on naive phone users.

Though Google's Android team, mobile makers and chipset manufacturers have put in a lot of effort to improve the security of its mobile OS, sometimes due to oversight, security loopholes go unnoticed.

In the latest instance, new vulnerabilities have been detected in Android phones with versions 15, 14, 13, 12, and 12L (for foldable phones), reported

If these vulnerabilities are left unfixed, attackers can execute malware code on targeted devices to steal personal information, reported Indian Computer Emergency Response Team (CERT-In)

"These vulnerabilities exist in Android due to flaws in the Framework, System, Google Play system updates (ART and Wi-Fi subcomponent), Imagination Technologies components, MediaTek components, and Qualcomm components. Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code on the targeted system, " reads CERT-In notification.

Google has acknowledged the issue and is in the process of rolling out the software update with a security patch to resolve the issue.

Owners with devices running Android 15, 14, 13, 12 and 12L are advised to upgrade to the latest October security update as soon as possible.

Samsung has already rolled out the custom update to several Galaxy Z Fold and Z Flip series phones. Soon, it will be expanded to other Galaxy phone variants.

Google is expected to introduce Android 15 with security updates to Pixel phones later this week.

Get the latest news on new launches, gadget reviews, apps, cybersecurity, and more on personal technology only on DH Tech.