Saw this on XDA news, and ViperOneM8 is vulnerable - probably others as well.
http://www.xda-developers.com/android/fight-fake-id-vulnerability-xposed/
Check out "Bluebox Security Scanner"
https://play.google.com/store/apps/details?id=com.bluebox.labs.onerootscanner
Check out "Fake ID fix"
https://play.google.com/store/apps/details?id=tungstwenty.xposed.fakeidfix
Requires Xposed, tell your friends.
http://www.xda-developers.com/android/fight-fake-id-vulnerability-xposed/
Check out "Bluebox Security Scanner"
https://play.google.com/store/apps/details?id=com.bluebox.labs.onerootscanner
Check out "Fake ID fix"
https://play.google.com/store/apps/details?id=tungstwenty.xposed.fakeidfix
Requires Xposed, tell your friends.