Amazon, in December 2021, patched a high severity vulnerability affecting its Photos app for Android that could have been exploited to steal a user’s access tokens. “The Amazon access token is used to authenticate the user across multiple Amazon APIs, some of which contain personal data such as full name,…