According to Google, a bug in Broadcom’s wireless firmware could allow a crook within Wi-Fi range to take over Android itself remotely.