Not Just Samsung Phones, Indian Govt Issues Warning For Apple Products

After Samsung phones, the Indian government's Computer Emergency Response Team (CERT) has issued a similar high-risk warning for Apple products.

Citing multiple vulnerabilities, the CERT said, "Multiple vulnerabilities have been reported in Apple products which could allow an attacker to access sensitive information, execute arbitrary code, bypass security restrictions, cause denial of service (DoS) conditions, bypass authentication, gain elevated privileges, and perform spoofing attacks on the targeted systems,"

The iOS, iPadOS, macOS, tvOS, watchOS, and the Safari browser are among the affected products.

Similarly, the nodal agency has issued a high-risk warning for Samsung Mobile phone users. The alert highlights numerous vulnerabilities impacting millions of Samsung Galaxy phones, (both older and newer models). It also underscores critical security concerns in Samsung Mobile Android versions 11, 12, 13, and 14, potentially enabling attackers to surreptitiously access and retrieve data from your device.

"Multiple vulnerabilities have been reported in Samsung products that could allow an attacker to bypass implemented security restrictions, access sensitive information, and execute arbitrary code on the targeted system," the CERT said in a notification.

The agency mentioned that the vulnerabilities are varied and affect different components of the Samsung ecosystem.

"These vulnerabilities exist due to improper access control flaw in KnoxCustomManagerService and SmartManagerCN component, integer overflow vulnerability in face preprocessing library; improper authorization verification vulnerability in AR Emoji, improper exception management vulnerability in Knox Guard, various out of bounds write vulnerabilities in bootloader, HDCP in HAL, libIfaaCa and libsavsac.so components, improper size check vulnerability in softsimd, improper input validation vulnerability in Smart Clip and implicit intent hijacking vulnerability in contacts," the statement added.