Rafay Baloch, and independent reasearcher, and Rapid7’s Joe Vennix, found a new bug that threatens around a billion android users. The bug has been found in the WebView component of Android 4.3 and below that makes users vulnerable to malicious hackers.
However, Google said that they can’t fix it. According to their statement, they do not develop patches for Android version before 4.4. A patch is impossible for them because the WebView is built-into the OS.
In a statement, Google said “Other than notifying OEMs, we will not be able to take action on any report that is affecting versions before 4.4 that are not accompanied with a patch.”