Serious security bugs put millions of Android devices at risk