A vulnerability present in most Android devices allows apps to initiate unauthorized phone calls, disrupt ongoing calls and execute special codes that can trigger other rogue actions. The flaw was found and reported to Google late last year by researchers from Berlin-based security consultancy firm Curesec. The vulnerability appears to have been fixed in Android 4.4.4, released on June 19. The latest version of Android is only available for a limited number of devices and accounts for a very small percentage of Android installations worldwide.”]
Source: https://www.csoonline.com/article/2451583/android-bug-lets-apps-make-rogue-phone-calls.html