Android 4.1.1 Devices are Vulnerable to Heartbleed

Android 4.1.1 Devices are Vulnerable to Heartbleed

Heartbleed, the bug being called one of the Internet’s biggest security threats, has been around for two years — but it was only recently discovered.

It’s not just websites and routers that are vulnerable to the web-wide bug Heartbleed — certain Android models are at risk too. As Google said that android 4.1.1 Jelly Bean are vulnerable to Heartbleed. Google said patching information is being distributed to its Android partners.

A Google spokesperson confirmed to Bloomberg that there are “millions” of devices running Android 4.1.1. Because Android updates are controlled by phone manufacturers and wireless carriers, it can be challenging to determine what versions of Android are available for various devices. We do know, however, that the HTC One S is running Android 4.1.1.

Heartbleed underscores what has long been one of Android’s biggest problems: pushing out software updates to its myriad vendors. Android updates are the responsibility of the device maker, and often need to be approved by wireless carriers. The only exceptions are Google-made devices, such as the Nexus series and Google Play Edition phones.