This confusion was because of a component dubbed libscimp .
The components flaw allowed pointers to be corrupted to gain arbitrary code execution.
However Dowd reported that the security vulnerability to Silent Circle and the issue has been resolved.
It is worth being mentioned that Blackphone got hacked in 5 minutes flat atDefcon 2014
Read More
source: www.techworm.net