In this paper, we systematically study eight popular Android smartphones from leading manufacturers, including HTC, Motorola, and Samsung and are surprised to ???nd out these stock phone images do not properly enforce the permission-based security model.