The Indian computer emergency response team under the electronic ministry and information technology has issued a new warning for users of the Android operating system.
High severity warning is for Android 9 users, Android 10, Android 11 and Android 12.
According to advisors, some vulnerabilities have been reported in the operating system that can be exploited by someone to execute the arbitrary code, get sensitive information and get high privileges on targeted systems.
Further advisers revealed that “this vulnerability is in the Android OS because of the defect in the Codec media component and the media framework on the Google Play System, the components of the skeleton, system components, kernel components, closed Qualcomm components and mediatek components.” According to the advisor, exploitation of this vulnerability.
Successful can allow attackers to execute arbitrary code, get sensitive information, get privileges and cause refusal of service conditions on targeted systems.
Google has recognized this vulnerability in the Android OS and launched security patches last week.
According to the new Android bulletin security patch level 2021-12-05 or newer than all these problems.
According to the company, these most severe issues are critical security vulnerabilities in the media framework component which can lead to disclosure of remote information without additional execution rights needed.
The severity assessment is based on effects that exploit possible vulnerabilities on affected devices, assuming the platform and mitigation services are turned off for development purposes or if successfully passed.
Apart from this, Cert-in has also issued a warning for Google Chrome users.
As per warning, various vulnerabilities have been reported in the Chrome browser that can be exploited by remote striker to carry out the Arbitrary code on the targeted system.
The company has also launched an update to overcome this vulnerability.