Google and Samsung have issued an urgent Android fix to address a serious security vulnerability affecting millions of users.