Your mobile phone may be hacked when visiting a hostile website. Researchers have used the Rowhammer attack to successfully run unauthorized code.
JavaScript based GLitch pwns browsers by flipping bits inside memory chips.
Source: Drive-by Rowhammer attack uses GPU to compromise an Android phone