Using the camera apps from Google and Samsung, other apps were able to create images and sound recordings without proper authorization.