Don't even need an app. There's a root LPE almost monthly now most of android takes a month or more to patch. Just need a common exploitable app to handle your link and get your initial shell.