Indian government discloses ‘high risk’ vulnerability affecting Android users: See details

If you’re using an Android device, it’s important to note that the Indian government’s Computer Emergency Response Team has issued a warning about a “high” security risk vulnerability in Android. The team stressed that these vulnerabilities could potentially allow attackers to obtain sensitive information and execute arbitrary code on your phone.

Which Android versions are affected?

These vulnerabilities exist in Android versions 11, 12, 13, and 14. This means that even if you have the latest Android version, you are not exempt from these risks.

CERT-In emphasized that there are multiple vulnerabilities in the framework, system, ARM components, as well as MediaTek components, UNISOC components, Qualcomm components and Qualcomm closed-source components.

How to protect yourself?

To protect your device, you need to install Android “Security Patch Level February 5, 2024 or higher to resolve all these issues.” So when your device’s OEM releases the above update, just download the latest Updates are available.

Given the “High” severity rating, it is recommended to focus on additional security enhancements. Enable two-factor authentication, use strong passwords, and practice good digital hygiene.

These are the vulnerabilities affecting the Android versions mentioned above

CVE-2023-32841, CVE-2023-32842, CVE-2023-32843, CVE-2023-33046, CVE-2023-33049, CVE-2023-33057, CVE-2023-33058, CVE-2023-33060, CVE- 2023-33072, CVE-2023-33076, CVE-2023-40093, CVE-2023-40122, CVE-2023-43513, CVE-2023-43516, CVE-2023-43518, CVE-2023-43519, CVE-2023- 43520, CVE-2023-43522, CVE-2023-43523, CVE-2023-43533, CVE-2023-43534, CVE-2023-43536, CVE-2023-49667, CVE-2023-49668, CVE-2023-5091, CVE-2023-5249, CVE-2023-5643, CVE-2024-0014, CVE-2024-0029, CVE-2024-0030, CVE-2024-0031, CVE-2024-0032, CVE-2024-0033, CVE- 2024-0034, CVE-2024-0035, CVE-2024-0036, CVE-2024-0037, CVE-2024-0038, CVE-2024-0040, CVE-2024-0041, CVE-2024-20003, CVE-2024- 20006, CVE-2024-20007, CVE-2024-20009, CVE-2024-20010, CVE-2024-20011.