The US National Institute of Standards and Technology (NIST) has warned of a major new zero-day vulnerability in Samsung Android smartphones which could allow a remote attacker to lock the handset.