Home
Mobiles
Mobiles News
CERT In Warns of Multiple Vulnerabilities Affecting Millions of iOS and Android Devices

CERT-In Warns of Multiple Vulnerabilities Affecting Millions of iOS and Android Devices

CERT-In has assigned the flaws affecting iOS and Android devices a high severity rating.

Written by David Delima | Updated: 14 May 2025 11:42 IST

CERT-In Warns of Multiple Vulnerabilities Affecting Millions of iOS and Android Devices

Photo Credit: Pexels/ Sora Shimazaki

Users should install the latest security updates on their devices

Click Here to Add Gadgets360 As A Trusted Source

Highlights

CERT-In says users should be aware of flaws affecting Android and iOS
These flaws have already been patched by OEMs
The vulnerabilites highlighted by CERT-Inc could result in DoS attacks

The Indian Computer Emergency Response Team (CERT-In) has issued two vulnerability notes warning users of security flaws affecting devices running on Android, iOS, and iPadOS. The first one refers to a denial of service (DoS) vulnerability affecting iPhone and iPad models running on recent versions of iOS and iPadOS. The second note highlights multiple flaws impacting Android devices that could allow malicious users to gain unauthorised access to a device. In both cases, users have been advised to take appropriate action to safeguard their smartphones and tablets.

Android, iOS Are Devices Susceptible to DoS Attacks Without Updates

CERT-In states in vulnerability note CIVN-2025-0092 that there are several flaws affecting the Android operating system that could be used by an attacker to run dangerous code on a user's device, and access data remotely. Malicious users could also perform a DoS attack on the device, after gaining elevated privileges.

These vulnerabilities affect smartphones running on Android 13, Android 14, and Android 15, according to CERT-In. This effectively means that millions of smartphones that are running on these versions of Android are vulnerable to their devices being compromised unless the relevant security patches are installed on their device.

Google Patches These Critical Android Zero-Day Flaws Exploited by Hackers

In order to remain safe, users must install the latest Android security patches that were rolled out to devices in May. CERT-In says that smartphones with the latest May 1 security patches will be protected from these security flaws. However, users might have to wait until these patches are made available by smartphone OEMs, while Google Pixel owners with automatic updates should already be protected.

On the other hand, CERT-In's CIVN-2025-0094 note states that iPhone models running on software that was released before iOS 18.3, or iPad models running on iPadOS 18.3 (and iPadOS 17.7.3 on older models) are susceptible to a DoS vulnerability.

The agency warns that users who are running on these older versions are at risk of becoming "unresponsive or non-functional" if they run malicious applications that can render them inoperable. Users will need to restore these devices if they are impacted by the DoS attack.

Google Fixes Critical Zero-Day Security Flaw Affecting Google Chrome

CERT-In says that users who have updated to iOS 18.3, iPadOS 18.3, and iPadOS 17.7.3 should remain protected from the DoS vulnerability. Considering that iOS 18.3 was released in January, many users should already have this version on their phones and tablets. They might also be running on iOS 18.5, which was released earlier this week.

Comments

Get your daily dose of tech news, reviews, and insights, in under 80 characters on Gadgets 360 Turbo. Connect with fellow tech lovers on our Forum. Follow us on X, Facebook, WhatsApp, Threads and Google News for instant updates. Catch all the action on our YouTube channel.

Further reading: CERT In, Security Flaws, Android, iOS, iPadOS, Vulnerabilities

David Delima

Email David Delima

As a writer on technology with Gadgets 360, David Delima is interested in open-source technology, cybersecurity, consumer privacy, and loves to read and write about how the Internet works. David can be contacted via email at DavidD@ndtv.com, on Twitter at @DxDavey, and Mastodon at mstdn.social/@delima. More