They do. These types of Qualcomm modems run QuRT, a proprietary RTOS, on the Hexagon processor which handles the baseband and the LTE stack. There is also a shi

They do. These types of Qualcomm modems run QuRT, a proprietary RTOS, on the Hexagon processor which handles the baseband and the LTE stack. There is also a shitty little core that runs "psuedo-Android" - you have adb and things like that, but it's mostly a more traditional embedded Linux environment- and handles certain AT commands (they actually go to the baseband first, but get IPCed over to Linux for handling after parsing if they match a registered command). With root on psuedo-Android, you can probably get code exec on Hexagon - especially for the cheaper modems, they have an older version of the Hexagon architecture and to work under this architecture things like ASLR are relatively rare. But it's more work - there's no obvious "execute arbitrary shellcode" IPC message, you need to do more RE/VR.