We discovered that the vulnerable OpenSSL Library also makes Android 4.1.1 and mobile apps bundled with it vulnerable to the Heartbleed bug.