Android security bug let malicious apps siphon off private user data

A malicious app could exploit the flaw by injecting malicious modules into other apps that rely on Google's Play Core library to steal private information, like passwords and credit card numbers.