The issue, present on Android versions, is similar to the known man-in-the-disk attack vector.
Source: Threadpost