I found an issue in collaboration with Amnesty and TAG that we have indication may be used ITW, CVE-2024-43047. See https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html for the details. Hopefully the bug will be patched on Android devices very soon ....