‘Surreptitious Sharing’ Android API Flaw Leaks Data, Private Keys

Researchers have identified a vulnerability in an Android API in messaging apps like Skype and perhaps Signal, and Telegram, that could lead to privilege escalation and data loss, including private keys.
Source: Threadpost