A recently discovered security flaw affecting some 95 percent of Android mobile devices means users are at risk of being hacked just by receiving a short message with malicious intent.