Researchers at cybersecurity firm Checkmarx say flaw enabled hackers to take control of camera app and take photos, eavesdrop; Google has issued a fix