A Telegram Android security flaw could expose phones to remote attacks through calls, but the vulnerability has been fixed.