Two security flaws could allow attackers to remotely crash apps or run commands on iPhones and iPads.