The bug, a privilege escalation vulnerability in Android's WebView programming interface, impacts Android platforms older than version 4.2 and could give an attacker remote access to users' cameras, file systems, call logs, text messages, contacts and other device data.