The Indian Computer Emergency Response Team (CERT-In), under the Ministry of Electronics and Information Technology, has released a critical cybersecurity advisory for Android smartphone users, cautioning them about serious security vulnerabilities in specific versions of the Android operating system. The advisory has been categorized as "high severity" and urges users to take immediate preventive actions to safeguard their devices from potential hacking attempts.
According to CERT-In, multiple vulnerabilities have been found in Android OS versions 11, 12, 12L, and 13, which could allow attackers to gain unauthorized access, execute arbitrary code remotely, and compromise sensitive user data. The flaws are said to stem from issues in components such as the Android Framework, System, Media Framework, and certain chipset-specific drivers.
“These vulnerabilities could be exploited by a remote attacker through specially crafted files or applications. Users could lose control over their devices, and personal data may be at risk,” said the official advisory.
CERT-In has strongly advised users to immediately update their devices with the latest security patches released by Google or their smartphone manufacturers. In addition, users are encouraged to:
Avoid downloading apps from untrusted sources
Refrain from clicking suspicious links or attachments
Regularly back up important data
Use antivirus and endpoint protection solutions
Enable automatic system updates where possible
The advisory also warned app developers and IT administrators to ensure that security protocols are up to date and to monitor network behavior for unusual activity.
Cybersecurity experts have welcomed the move, stating that the increased number of Android users in India makes such timely alerts essential. India has over 600 million smartphone users, with Android accounting for over 90% of the mobile operating system market share, making the platform a frequent target for cybercriminals.
Recent years have seen a rise in mobile-based phishing scams, spyware, and data theft incidents, particularly through malicious apps and unsecured public Wi-Fi networks. CERT-In has been actively monitoring such threats and issuing advisories to mitigate risk to the public.
Users can check their device’s settings for system updates and are urged to act without delay. As mobile devices continue to store sensitive information ranging from financial data to biometric identifiers, keeping them secure is now more important than ever.
