A vulnerability that was detected in the web version of Google Photos could be used by hackers to retrieve image metadata. The attack is of the type that is known among security researchers as a browser side-channel leak The vulnerability was discovered by Imperva security researcher Ron Masas. Google has patched a bug in its Photos service that could have allowed a malicious threat actor to infer geo-location details about images a user was storing in their Google Photos account. Google Photos also uses a state-of-the-art AI engine which could describe photos with text and detects objects and events.”]
Source: https://hackercombat.com/google-photos-vulnerability-that-lets-retrieve-image-metadata/