The bug allowed 1,500 apps built by 876 developers to view users’ unposted “draft” photos.
Source: Threadpost