Ironically, Apple originally patched the serious vulnerability in iOS 12.3 back in May, but for some reason failed to do so in iOS 12.4, which was released last month. The flaw can let a malicious application execute code on an iPhone with system privileges.
Source Link

