https://www.bbc.com/news/technology-49520355
Has been security patched Feburary 2019, but was exploited for 2 years on IOS 10 through IOS 12.
"The attack was said to be carried out using websites which would discreetly implant malicious software to gather contacts, images and other data."
The only iOS device I have is running the 13 beta.
I'm surprised we haven't heard of any more celeb leaked photos over the last couple of years with this. Maybe they all switched to Android! ;)