A research team has discovered a security gap in modern mobile phones that is very unlikely to have been created by accident. In fact, it should have been removed back in 2013.