IBM researchers uncovered a critical vulnerability affecting everyone not running the most up-to-date version of Google Android.