IOMobileFrameBuffer in Apple iOS before 9.3.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
https://support.apple.com/HT207026
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-5640