Apparently they can send an SMS with an attached media file to your phone and there are no links to click on but your phone executes the media file and they can take control of your phone.
I think there is still a vulnerability today. Unbelievable the bugs that are left behind.