A malicious code could sit inside a font inside the PDF, creating a stack overflow that fills up the memory.
With the ensuing crash, files are deleted, secret monitoring programs are installed and some find automatic calls to 911 every time you try to use the phone.
Until Apple creates a fix, the surest way to avoid the malicious code is to avoid any PDF links directly and not loading any PDF from any non-trusted source.