The Indian Computer Emergency Response Team (CERT-In), under the Ministry of Electronics and Information Technology (MeitY), has issued a high-severity advisory (CIVN-2025-0293) warning users of multiple security flaws affecting Google Android operating systems. These risks can allow attackers to get elevated privileges or execute arbitrary code on affected devices, posing a serious threat to user data and system stability. So, if you are an Android user, read the details carefully to stay safe from potential cyberattacks.
As per CERT-In, the vulnerabilities can impact Android versions 13, 14, 15, and 16, which means almost every modern Android smartphone could be at risk. This includes devices from popular brands like Samsung, OnePlus, Xiaomi, Realme, Motorola, Vivo, Oppo, and Google Pixel, among others.
The vulnerabilities are reportedly linked to hardware and software components developed by Qualcomm, MediaTek, NVIDIA, Broadcom, and UNISOC, which power the majority of Android phones, tablets, and wearables. CERT-In notes that the issue stems from flaws identified in various vendor-specific components referenced in Google’s November 2025 Android Security Bulletin.
If exploited, this can let the hacker gain administrative access, install malicious software, steal personal information, or even crash the device.
CERT In has categorised the issue as high risk, warning that the flaws can result in unauthorised access to sensitive user data, financial information, and cloud accounts or even complete system compromise. Devices that have not received the latest security patches are especially vulnerable to attacks. This can impact Android users across smartphones, smart TVs, and IoT devices.
CERT-In has advised users to immediately update their devices once manufacturers roll out security patches. The official Google Android Security Bulletin for November 2025. Users are also advised to:
Avoid downloading apps from third-party or unknown sources.
Keep system and app updates enabled automatically.
Use Google Play Protect to scan for potential threats.
Refrain from clicking on suspicious links or attachments received via SMS or email.