The developers of Replicant, a pure free-software version of Android, claim to have discovered a security flaw in certain Samsung Galaxy phones and tablets – one so serious that it could potentially grant an attacker remote access to the device's file system.
http://www.theregister.co.uk/2014/03/13/samsung_remote_file_backdoor/