If you have delayed updating your smartphone due to low storage space or limited mobile data, your device may be at risk. The government, through its cybersecurity agency CERT-In, has issued an alert advising Android users to install the latest security updates to remain protected.
CERT-In warns of serious Android flaw
In its advisory, CERT-In has urged users to update their devices to security patch levels dated January 5, 2026, or later. The agency said a vulnerability has been identified in Google’s Android operating system that could allow a remote attacker to execute arbitrary code on a targeted device.
If exploited, the flaw could cause memory corruption and system crashes, potentially affecting the stability and security of smartphones.
Who is affected
CERT-In said the vulnerability impacts both individual users and organisations using Android devices. The issue lies in the Dolby Digital Plus (DD+) Unified Decoder, a component used to process media content on Android phones.
Dolby downplays risk, but flags Pixel concerns
Dolby said the chances of the vulnerability being exploited maliciously are low. According to the company, the most common outcome is a media player crash or an automatic restart, rather than a complete system takeover.
However, Dolby warned that the risk could be higher for Google Pixel devices if the flaw is combined with other known Pixel-specific vulnerabilities.
Google confirms fix in January update
In its January 5 security bulletin, Google confirmed that the latest Android security patch fixes the Dolby-related vulnerability, which was first reported in October 2025. Google noted that the severity rating was provided by Dolby.
Users are advised to install the update as soon as it becomes available for their device to ensure continued security.