Checkmarx Security Research Team cracked into the systems that control these cameras to identify potential abuse scenarios. They found that an attacker can control the Google Camera app to take photos and record videos. This same technique also applied to Samsungs camera apps, presenting significant implications to hundreds-of-millions of smartphone. In this blog, well explain the vulnerabilities (CVE-2019-2234), provide details of how they were exploited, explain the consequences, and note how can safeguard their devices. This blog is also accompanied by a proof of-concept (PoC) video, as well as a technical report.”]
Source: https://checkmarx.com/blog/how-attackers-could-hijack-your-android-camera/