Cybersecurity researchers at leading software security company Checkmarx have discovered a critical vulnerability in the Amazon Photos app on Android, which can allow a malicious application to be installed on the user’s phone and steal the Amazon access token.