The video lists these links (last one has a bug in the URL, corrected by me): * https://bugs.chromium.org/p/project-zero/issues/detail?id=2002 https://bugs.chr

The video lists these links (last one has a bug in the URL, corrected by me): * https://bugs.chromium.org/p/project-zero/issues/detail?id=2002 https://bugs.chromium.org/p/project-zero/issues/detail?id=20... * https://security.samsungmobile.com/securityUpdate.smsb https://security.samsungmobile.com/securityUpdate.smsb * https://github.com/googleprojectzero/SkCodecFuzzer https://github.com/googleprojectzero/SkCodecFuzzer TLDR: Using a fuzzer, they found multiple RCEs in a custom image format called qmage. It can be turned into a interactionless takeover by sending crafted MMS messages to a phone. A major part of the attack was defeating ASLR. The qmage vulnerabilities have been patched by Samsung in the May update.