When will the Fake ID vulnerability be fixed?

[BobSF]

The Bluebox Security Scanner (from the Play Store) says my phone is vulnerable to the Fake ID flaw in Android OS.  My phone is an HTC One M8 running Android 4.4.2.

[SuzyQ · Accepted solution]

Supposedly, OS 4.4.x is safe, the Fake ID vulnerability only applies to 4.3.x and below.  Still, don't download from untrusted sources - use the playstore, rather than links in email or on websites to get your apps.