A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by opening a URL and turning the phone.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-19937.json"