Three security vulnerabilities found on MediaTek and Qualcomm chipsets were finally patched late last year after leaving 66% of Android phones at risk.