Researchers at security conference Def Con 2019 demonstrated a method of exploiting regular database searches to produce malicious results, and used Apple’s standard iOS Contacts app to prove it.

Source:: Apple Insider