The Indian Computer Emergency Response Team (CERT-In), functioning under the Ministry of Electronics and Information Technology, has issued a high-severity warning aimed at users operating Android OS versions 12, 12L, 13, and 14. The advisory has been released in response to the discovery of multiple vulnerabilities within the Android operating system.
As per the government body, these flaws have the potential to expose users to a variety of cyber threats, including unauthorized access to personal information, privilege escalation, and denial-of-service (DoS) attacks, which could lead to significant disruptions in device functionality.
CERT-In has highlighted that these vulnerabilities exist in different components of Android, making the scenario even more difficult. Specifically, the flaws are found in the Framework, System, and Google Play system updates, particularly within the Remote Key Provisioning subcomponent, Kernel, and several other external components supplied by technology providers such as Arm, Imagination Technologies, Unisoc, and Qualcomm.
Also Read: Apple Watch Ultra 3 To Launch In 2025: Analyst Ming-Chi Kuo
How Can Users Protect Themselves From Vulnerabilities
Once exploited, these vulnerabilities are capable of enabling attackers to gain access to sensitive information stored on the device or take control of the system by obtaining elevated privileges.
In an era where smartphones are increasingly used to manage sensitive tasks like online banking, accessing confidential information, and sharing real-time locations, the need for robust security measures is more important than ever. Devices running outdated Android versions without the latest security patches are at heightened risk of being targeted by hackers. These older versions often have unpatched vulnerabilities that are easier for cybercriminals to exploit.
While Google frequently rolls out updates to patch these issues, many users delay installing them due to concerns over data consumption, insufficient storage space, or the inconvenience of updating. However, ignoring these things can make the device vulnerable. CERT-In always strongly advises to regularly check for and install security patches from Google to protect their data and ensure the security of their Android devices.
Also Read: Lenovo Launches New Copilot+ Laptops With Snapdragon X Plus
New Windows Vulnerability Could Cause BSOD Yet Again
Cybersecurity company Fortra LLC discovered the vulnerability in the Common Log File System (CLFS) driver of Windows. It was caused due to an improper validation of specified quantities in input data, meaning the system failed to correctly check the values entered by the user.
The vulnerability then could enable a malicious authenticated user to trigger the error through a forced call to the KeBugCheckEx function, which would lead to system instability and denial of service or DoS attacks.
A researcher at Fortra, Ricardo Narvaja, demonstrated how the vulnerability could be exploited through a proof-of-concept (PoC). Narvaja was able to craft specific values within a.BLF file is a format usually used by the Windows common log file system.