this can allow Malicious apps to get permission to access voicemails, text messages, call logs and other apps which may also let the Malware decide what updates and permission should be allowed to any other app installed on the device. Researchers said that all the Official versions and over 3000 customized version of the Android are effected by the flaw, The flaws has already been reported to the Google, and measures are being taken to fix it. Resources:ReportImage 

Updating Your Android can wake up the hidden Malware in your device    TechWorm - 56