iPhone users are vulnerable to a lock-screen flaw that allows a hands-on hacker to gain full access to a user’s contacts list.