A vulnerability in an Android component shipped with phones that use Qualcomm chips puts users’ text messages and call history at risk of theft. Malicious applications could exploit the flaw in order to execute commands as the “radio” system user, which has special privileges. The flaw was found by security researchers from FireEye and was patched by Qualcomm in March. Because the vulnerability was introduced five years ago, many affected devices are unlikely to ever receive the fix because they’re no longer supported by their manufacturers.”]