Although Google releases updated Android firmware when there are major security issues, mobile users have to wait until their vendor uses the fixes to create new firmware and make it available. This rarely happens and creates something of a security nightmare. Why do vendors do this? Here are some reasons [itwire.com].