“Tests conducted by Project Zero confirm that those four vulnerabilities allow an attacker to remotely compromise a phone at the baseband level with no user interaction, and require only that the attacker know the victim’s phone number.”
Project Zero found 18 bugs in Samsung’s Exynos modems, and four give full remote takeover with nothing but a phone number. The fix is to turn off VoLTE and Wi-Fi calling. Pixel 6 owners can’t, because a 2021 update switched VoLTE on and removed the toggle. Google sold the phone, shipped the bug and took away the off switch.