A major vulnerability discovered to have an impact on Samsung and LG phones could have allowed an attacker to steal all data on a handset.