I read about this here.
If I understand this correctly, it states that a smartphones could get compromised via it's baseband chip and it's (potentially) unsafe and closed-source firmware.
I also read this discussion about the mentioned article.
But as I have no deep understanding of the low-level hardware used inside smartphones (or the security implications of different connection types between the GSM chip and other components, I do not really know what to believe.
torproject.org's article "Mission Improbable: Hardening Android for Security And Privacy" states:
Until phones with auditable baseband isolation are available (the Neo900 looks like a promising candidate), the baseband remains a problem on all of these phones. It is unknown if vulnerabilities or backdoors in the baseband can turn on the mic, make silent calls, or access device memory
How realistic is an attack scenario like this when thinking of an adversary capable of compromising the radio link (given a perfectly safe operating system on the smartphone)?