NowSecure has a useful new 2016 Mobile Security Report (pdf) based on their analysis of over 400,000 apps. They found that 24.7 percent of mobile apps include at least one high risk security flaw. 82 percent of Android devices are vulnerable to at least one of 25 OS flaws. iOS had the most vulnerabilities in 2015 at 375 that’s nearly three times more than Android, which had 130.
NowSecure conclude that leaky apps that store or transmit sensitive personal and corporate data in an insecure manner are of far greater concern than malware.