The Android ver on my phone is 4.1. Still runs just fine, but then again all I use it for are calls/SMS, so there's little scope to be exploited.

It might still be vulnerable to stagefright, exploitable over MMS.

Stagefright is the name of the component, not the exploit. And in most cases, devices from major vendors are going to have patched binaries, even on images as old as Jellybean.

> ...all I use it for are calls/SMS, so there's little scope to be exploited.

You mean little scope of exfiltration (I'm guessing it's not connected to the internet). There are a lot of vulnerabilities in text rendering that can be exploited via SMS.

Android with a version number is ancient; current Androids have single letters in their name.