How to reproduce:
1. Open attached Unity project
2. Build and run on a device with Android 4 or 5 OS

Expected result: "????????" should appear.
Actual result: random characters appear.

Workaround:
1. create a Java *char[]* instance
2. convert a C# string to *char[]*
3. copy all the *char[]* values to a Java *char[]*
4. create a Java *String* instance passing the above Java *char[]* to the *String* constructor

Reproduced with: 2019.2.0a5, 2019.1.0b3, 2018.3.5f1

Devices under test:
Reproduced on:
VLNQA00059, Htc Desire 500 (HTC Desire 500), Android 4.1.2, CPU: Snapdragon 200 MSM8225Q, GPU: Adreno (TM) 203
VLNQA00048, Samsung Galaxy S3 (GT-I9300), Android 4.3, CPU: Exynos 4 Quad 4412, GPU: Mali-400 MP
VLNQA00067, Motorola RAZR D1 (XT914), Android 4.1.2, CPU: MediaTek MT6575, GPU: PowerVR SGX 531
VLNQA00035, Motorola DROID MAXX 2 (XT1021), Android 4.4.4, CPU: NOT FOUND, GPU: Adreno (TM) 305
VLNQA00140, Samsung Galaxy S4 (GT-I9505), Android 5.0.1, CPU: Snapdragon S4 Plus MSM8960, GPU: Adreno (TM) 320

Not reproduced on:
VLNQA00115, Sony Xperia Z3 (D6603), Android 6.0.1, CPU: Snapdragon 801 MSM8974AC, GPU: Adreno (TM) 330
VLNQA00002, Samsung Galaxy S5 Neo (SM-G903F), Android 6.0.1, CPU: Exynos 7 Octa 7580, GPU: Mali-T720
VLNQA00125, Google Pixel 2 (Pixel 2), Android 8.1.0, CPU: Snapdragon 835 MSM8998, GPU: Adreno (TM) 540

Notes:
In 2017.4 application provides no strings.
Script uses AndroidJNI class, so the issue is only visible on Android devices.