Details of the hacking threat, which has been dubbed Stagefright, were published this week by cyber security research firm Zimperium.
The only devices safe from the bug are those running anything below version 2.2, according to Zimperium. A Google representative told ABC News the company's Android team was notified of the bug.
"This vulnerability was identified in a laboratory setting on older Android devices, and as far as we know, no one has been affected. As soon as we were made aware of the vulnerability we took immediate action and sent a fix to our partners to protect users," the representative said.
It was unclear yet whether any of Google's partners had pushed out the patch to users. However, Robert Siciliano, an online safety expert to Intel Security, told ABC News that now is a good time to ensure automatic updates are enabled on their devices if it's an option.