Vulnerabilities in open-source Apple audio software may have risked millions of Android phones