Android devices are affected by a critical vulnerability which allows a malicious app to impersonate a trusted application inheriting its permissions.