On the iPhone, the SQLite database vulnerability can be accessed thanks to a known bug in iOS’s Contacts app that has existed for four years now without a fix.

Researchers at security conference Def Con 2019 demonstrated a method of exploiting regular database searches to produce malicious results, and used Apple's standard iOS Contacts app to prove it.

Researchers Show How SQLite Can Be Modified to Attack Apps New technique involves query hijacking to trigger a wide range of memory safety issues within the widely used database engine, Check ...