Flaw authorizes attackers to spy on users through Android camera