Qualcomm has patched a vulnerability in netd (network_manager) that allows an attacker to compromise SMS and phone call databases. The flaw was fixed within 90-days, but the gap in Android versions on the market means most users are out of luck. Older devices are less likely to get fixes, because carriers would rather you buy a new phone. Google has included the netd patch on May 1, but that doesn’t mean carriers delivered it to all Android devices. FireEye says they’ve detected no active attacks against vulnerable devices.”]