> Meanwhile, the other 14 vulnerabilities are considered not as severe as they “require either a malicious mobile network operator or an attacker with local access to the device.”

The kind of people with the resources to actively exploit this are the same kind of people who can compel the carriers to transmit whatever they want.