Skip to main content

Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam.

Cyber Security Agency of Singapore
  1. Home
  2. Alerts & Advisories
  3. Alerts
  4. Critical Vulnerabilities in Android Operating System
Alerts

Critical Vulnerabilities in Android Operating System

8 March 2023

Google has released security updates to address multiple critical vulnerabilities (CVE-2023-20951 and CVE-2023-20954) for devices running Android versions 11, 12, and 13.

Successful exploitation of these vulnerabilities could allow an attacker to perform remote code execution (RCE) without any user interaction and with no additional execution privileges required.

Users of affected product versions are advised to upgrade to the latest versions immediately by going to Settings > System > System Update and selecting the "Check for updates" button. Alternatively, the device can be updated at Settings > Security & Privacy > Updates > Security Update.

For devices running Android versions 10 and older, which have reached End of Life (EoL), users are advised to check for important security fixes via the Google Play system updates by going to Settings > Security & privacy > Updates > Google Play system update.

More information is available here:

https://source.android.com/docs/security/bulletin/2023-03-01

https://www.bleepingcomputer.com/news/security/android-march-2023-update-fixes-two-critical-code-execution-flaws/

Back to top