Up to 50 million Android devices could be vulnerable to Heartbleed attack. Here’s how to check yours

  • 15 April 2014
  • 4 replies
  • 475 views

Userlevel 7
Badge +3
 By Graham Cluley,
 
Millions of Android smartphones and tablets are at risk of being attacked via the Heartbleed bug (also known as CVE-2014-0160), more than a week after the security vulnerability was first made public.
Last week, Google announced that it was updating some of its services in response to the serious security hole.
But at the same time the company noted that when it came to the Android operating system, only one particular version of the software was at risk: Version 4.1.1 of Jellybean.
 
 Up to 50 million Android devices could be vulnerable to Heartbleed bug
 

4 replies

Userlevel 7
Hi Dermot,
 
Up to 50 million? Oh my, what a high statistical values :S
Users should update their Android to the newer version, of course if only they have a such chance.
 
Mike
 
Userlevel 7
Badge +3
@ wrote:
Hi Dermot,
 
Up to 50 million? Oh my, what a high statistical values :S
Users should update their Android to the newer version, of course if only they have a such chance.
 
Mike
 
They should all be patching and updating, you're correct Mike, but human beings are often notoriously lazy to do so. Or might not even know how to do that.
 
    Worldwide, the figure could be 50m devices, based on Google's own announcement that any device running a specific variant of its "Jelly Bean" software – Android 4.1.1, released in July 2012 – is vulnerable.
 From: Heartbleed makes 50m Android phones vulnerable, data shows | Technology | theguardian.com
Userlevel 7
@ wrote:
They should all be patching and updating
Yup, that's true!
It's a pity that most manufacturers simply doesn't care about it.
"You want to have a newer Android, you should buy a new device that has it onboard".
Unfortunately, in most devices operating on Android this rule still works in practice... :(
Roooting your devices definitely shouldn't be the only way to have its OS updated.
 
Mike
Userlevel 7
Badge +3
Yes, but the blame really lies with Google imho, for not updating that version of Jellybean last week, particularly if so many are still running it, 
Sorry, I've overlooked also: .
"Even if you *want* to upgrade the OS on your Android devices you might not be able to, because an Android update is only going to be available for those devices with the assistance and goodwill of the manufacturer and mobile phone carrier."
 
 

Reply