The data-stealing bug in Android 2.3 (Gingerbread), allows attackers read and upload pictures, voicemail and other data stored on a handset???s SD memory card, according to Xuxian Jiang, assistant professor in North Carolina State University???s department of computer science.