Photo: Shutterstock
cert in flags multiple weak spots in android os carrying data

CERT-IN flags multiple weak spots in Android OS carrying data leak risk

Indian Computer Emergency Response Team (CERT-IN) on Monday notified multiple security vulnerabilities in Google Android, which could allow unauthorised access to sensitive information and cause a denial of service conditions in the targeted device.

CERT-IN released a vulnerability note a week after Google informed about the security risks in its Security Bulletin—June 2022. The affected software includes operating system versions 10, 11, 12, and 12L.

“Multiple vulnerabilities have been reported in Google which could be exploited by an attacker to execute arbitrary code, gain elevated privileges, gain access to sensitive information and cause a denial of services (DoS) condition on the targeted system,” the cyber security agency said while issuing a high severity note.

These vulnerabilities exist in Google Android due to flaws in the Framework components, Media Framework Components, Google Play System Updates, Kernel Components, MediaTek components, Unisoc Components, and Qualcomm closed-source components, the agency added.

On June 6, Google said that it had noticed security issues affecting Android devices. “The most severe of these issues is a critical security vulnerability in the System component that could lead to remote code execution with no additional execution privileges needed,” the tech giant added. It has asked the users to install the security patch levels 2022-06-05 or later to avoid the risks.

Dear Reader,

Business Standard has always strived hard to provide up-to-date information and commentary on developments that are of interest to you and have wider political and economic implications for the country and the world. Your encouragement and constant feedback on how to improve our offering have only made our resolve and commitment to these ideals stronger. Even during these difficult times arising out of Covid-19, we continue to remain committed to keeping you informed and updated with credible news, authoritative views and incisive commentary on topical issues of relevance.
We, however, have a request.

As we battle the economic impact of the pandemic, we need your support even more, so that we can continue to offer you more quality content. Our subscription model has seen an encouraging response from many of you, who have subscribed to our online content. More subscription to our online content can only help us achieve the goals of offering you even better and more relevant content. We believe in free, fair and credible journalism. Your support through more subscriptions can help us practise the journalism to which we are committed.

Support quality journalism and subscribe to Business Standard.

Digital Editor

Go to the source link

Check Also

How eBay Reimagined Its Analytics Landscape

How eBay Reimagined Its Analytics Landscape

To set the path for more tech innovation at eBay, we recently completed a transition …

Leave a Reply

Your email address will not be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.