Google pushed out its first-ever monthly security update for Android in August, fixing the Stagefright vulnerability that an attacker could use to own your device with a malicious MMS message. To bypass the lockscreen an attacker has to have physical access to your device, and the device needs to be set to lock with a password (not a PIN or pattern) The exploit works by entering an extremely long string of characters into the password field while the camera is open, which causes the device to crash back to the home screen.”]