Digital Innovation Center Warns of 25 Android Vulnerabilities and Urges Users to Update Security Patches

The Digital Innovation Center (DIC), Walailak University, is alerting users of Android and Android Automotive OS devices to check for and install the latest security updates. The warning follows an advisory issued by the National Broadcasting and Telecommunications Commission (NBTC) on October 11, 2026, which identified 25 security vulnerabilities affecting Android Framework and System components. Of these, 7 vulnerabilities are rated Critical, involving issues such as Elevation of Privilege (EoP), Remote Code Execution (RCE), Denial of Service (DoS), and information disclosure. These vulnerabilities could potentially allow unauthorized parties to access sensitive information or gain partial control over device operations.

The vulnerabilities affect several Android versions, including Android 14, 15, 16, 16 QPR2, and 17, as well as the Telephony Core and Wi-Fi components addressed through Google Play system updates. In addition, 6 vulnerabilities have been identified in supported Google Pixel devices, while Android Automotive OS has 5 additional High-severity vulnerabilities. General Android users are advised to ensure that their devices have Android Security Patch Level 2026-10-01 or later, while Google Pixel devices should have Security Patch Level 2026-10-05 or later. Administrators of Android Automotive OS devices should coordinate with manufacturers to apply the required security updates.

The Digital Innovation Center recommends checking the security patch level by navigating to Settings > About phone > Android version and installing available updates through Settings > System > Software updates. Users should also check for Google Play system updates to ensure that relevant components are fully patched. In addition, users are encouraged to enable Google Play Protect and avoid installing applications from untrusted sources. However, Play Protect does not replace the need to install security patches. Users should regularly update their operating systems and applications, particularly on devices used to access university information systems, to reduce security risks and protect important data.

Thank you for the information ThaiCERT https://www.thaicert.or.th/2026/10/11/%E0%B8%AD%E0%B8%B1%E0%B8%9B%E0%B9%80%E0%B8%94%E0%B8%95%E0%B8%94%E0%B9%88%E0%B8%A7%E0%B8%99-android-%E0%B8%AD%E0%B8%AD%E0%B8%81%E0%B9%81%E0%B8%9E%E0%B8%95%E0%B8%8A%E0%B9%8C%E0%B9%81%E0%B8%81%E0%B9%89/