Google has patched nearly 130 vulnerabilities in Android, including an exploited zero-day bug in the graphics component of Qualcomm chipsets.