Update: proof of concept on GitHub published. A use-after-free flaw in Apple's iOS and iPadOS lets an app on the device run arbitrary code with kernel privileges. It is reached locally, without any login, but it requires the user to take an action, and attacks using it are happening.