8 figures. easily.

Apple itself pays $1-million for bug bounties of this type.

https://security.apple.com/bounty/categories/

And worth every penny of that to avoid the PR that ensues with one of these in the wild.