Security researcher Mark Blaszczyk has discovered a vulnerability in Android that attackers can exploit via text message.