On Phone, the exploit chain to do exactly that is already public.