New Unpatchable Exploit Targets Apple Devices with A12 and A13 Chips
Paradigm Shift says the flaw can’t be fixed by software and extends the BootROM exploit history from checkm8 to newer iPhones.
- Security research firm Paradigm Shift today published details of a new BootROM vulnerability affecting Apple's A12 and A13 chips, along with a working proof-of-concept exploit named "usbliter8."
- Because the vulnerability exists within the BootROM hardware, it cannot be fixed via software updates, meaning affected devices remain permanently vulnerable. The exploit leverages a hardware bug in the USB controller that cannot be patched.
- While A12 devices are straightforward to exploit, the A13 chip requires bypassing Pointer Authentication Codes, a security feature designed to prevent memory tampering. The proof-of-concept project on GitHub has amassed more than 280 stars in just a few hours.
- Researchers worked with Apple Product Security on coordinated disclosure before publication. Although "usbliter8" does not directly affect the Secure Enclave, it opens wider attack vectors to compromise it.
- This exploit extends the history of "checkm8," a prior BootROM vulnerability released in 2019 that affected older Apple SoCs. Given the unpatchable nature, researchers advise that migrating to newer hardware remains the most effective mitigation for affected users.
12 Articles
12 Articles
A12 & A13 Apple devices face an unpatchable SecureROM vulnerability
Security researchers have published a new unpatchable SecureROM exploit for Apple's A12 and A13 chips, extending public BootROM exploitation beyond the devices affected by checkm8.iPhone XRSecurity firm Paradigm Shift disclosed the unpatched exploit, called usbliter8, on June 18. It achieves code execution through a flaw in Apple's USB boot process.The vulnerability affects devices powered by Apple's A12 and A13 chips, including the iPhone XS, i…
It has been revealed that the A12 chip in the iPhone XS series and the A13 chip in the iPhone 11 series have vulnerabilities that cannot be patched.

Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium







