Researcher explains that vulnerable code re-use of zero-day in Android's CyanogenMod exposes million users to Man-In-The-Middle attacks.