Unprotected Receiver in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows malicious users to record video without camera privilege.
samsung factorycamera