As mobile devices are becoming one of the most common thing own by people, the device is becoming more of of a target by hackers. Many mobile device's operating systems can be infected with the evergrowing number of malware, and Android is no exception.
With the many users and massive popularity, Android is no exception.
Android provides a media playback engine at the native level. This is called Stagefright, and it comes built-in with software-based codecs for several popular media formats. First discovered by Zimperium's Joshua Drake, the bug allows an attacker to remotely execute malicious code through a phony multimedia text message. With users using Google Hangout, even without ever seeing the message because Android process multimedia message automatically, the malware runs as soon as the infected message is received.
Google patched the bug as soon as it could, and threw the updates to all of Android's carrier.