Video: Zimperium takes over Nexus 6 using Stagefright

The report describes a public demonstration of the Stagefright Android vulnerability in which researchers showed that malicious media sent via text/MMS can allow remote takeover of a device (download photos, track GPS, record audio/video) without user interaction; while Google issued mitigations, many devices remain unpatched and an estimated ~1 billion Android devices were reported at risk.