Indian Computer Emergency Response Team (CERT-In) issued a high-severity alert for android devices on September 11, 2024 highlighting the vulnerabilities that affect Android versions 12, 12L, 13, and 14.
The advisory said, bad attacker could potentially exploit these vulnerabilities to gain access the sensitive information stored in the devices, even they are able to gain elevated privileges (admin-level control), or launch denial-of-service (DoS) attacks, which can disrupt or disable targeted devices.
By infosecbulletin
/ Wednesday , June 18 2025
Russian cybersecurity experts discovered the first local data theft attacks using a modified version of legitimate near field communication (NFC)...
Read More
By infosecbulletin
/ Tuesday , June 17 2025
Cybersecurity researcher Jeremiah Fowler discovered an unsecured database with 170,360 records belonging to a real estate company. It contained personal...
Read More
By infosecbulletin
/ Tuesday , June 17 2025
GreyNoise found attempts to exploit CVE-2023-28771, a vulnerability in Zyxel's IKE affecting UDP port 500. The attack centers around CVE-2023-28771,...
Read More
By infosecbulletin
/ Tuesday , June 17 2025
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently included two high-risk vulnerabilities in its Known Exploited Vulnerabilities (KEV)...
Read More
By infosecbulletin
/ Monday , June 16 2025
SafetyDetectives’ Cybersecurity Team discovered a public post on a clear web forum in which a threat actor claimed to have...
Read More
By infosecbulletin
/ Sunday , June 15 2025
WestJet, Canada's second-largest airline, is looking into a cyberattack that has affected some internal systems during its response to the...
Read More
By infosecbulletin
/ Saturday , June 14 2025
Resecurity found 7.4 million records of Paraguayan citizens' personal information leaked on the dark web today. Last week, cybercriminals attempted...
Read More
By infosecbulletin
/ Friday , June 13 2025
HashiCorp has revealed a critical vulnerability in its Nomad tool that may let attackers gain higher privileges by misusing the...
Read More
By infosecbulletin
/ Friday , June 13 2025
SoftBank has disclosed that personal information of more than 137,000 mobile subscribers—covering names, addresses, and phone numbers—might have been leaked...
Read More
By infosecbulletin
/ Friday , June 13 2025
Serious security vulnerabilities in Trend Micro Apex One could allow attackers to inject malicious code and elevate their privileges within...
Read More
What Causes These Vulnerabilities?
Vulnerabilities in the android ecosystem arise from various areas, including issues in the Android Framework, System, Google Play updates and hardware components from Qualcom, Arm and Unisoc. The remote key provisioning subcomponent in Google play updates is also identified as a potential attack entry point.
Hackers can exploit these weaknesses to bypass security, steal personal data, control devices remotely, or crash the system with necessary tasks (a DoS attack).
How Can You Protect Your Device?
CERT-in advises all Android users to stay alert and install security updates promptly. These updates, provided by manufactures like Samsung, Oneplus and Xaomi, aim to fix vulnerabilities and enhance device security against cyber threat.
Users should avoid installing untrusted apps, visiting unknown websites, and clicking on suspicious links until
the updates are available. Monitoring app permissions and being careful with personal data can help reduce risks.
By promptly applying these updates, users can protect their devices from these serious vulnerabilities and stay safe from cyber threats.