Earlier quoted context omitted.
You probably took your security for granted? I'm being perfectly serious, RCEs like this are table-stakes for modern cyber-warfare.
A state (or a carrier, in theory), doesn't need RCEs to do this. In every phone, the "actual phone", what talks to cell towers, is a separate system called the Baseband. It is a full computer, storage, memory, encryption, ... and it is under the control of carriers and through them of law enforcement and the like. It is also where the microphone and mostly the cameras are connected. The baseband then passes them thro…
No, the only part where carriers can run arbitrary code is on the sim card, which can only run javacard applets.
>It can also transmit audio and video when the phone is not actually in a call.
Source? AFAIK both iPhones and Pixels have discrete modems, which means the baseband is separated from the main processor and communicates with it via some sort of bus. It's unclear how the baseband would be able to get arbitrary audio/video when it's isolated in this manner.