Security researchers have found a bug in Qualcomm chip sets and software drivers that would allow malicious actors to trigger privilege escalations and gain root access to an estimated 900 million Android devices.