Unpatchable usbliter8 Exploit Permanently Compromises Apple A12 and A13 Devices
By
Nick Papanikolopoulos
Summary
Security research firm Paradigm Shift published a proof-of-concept exploit called usbliter8 that targets an unpatchable hardware flaw in Apple's A12 and A13 chips (iPhone XR through iPhone 11). The exploit achieves arbitrary code execution inside the SecureROM — immutable boot code physically burned into the silicon — meaning no software update or iOS patch can ever fix it. The vulnerability stems from a flaw in the Synopsys DWC2 USB controller combined with a DART bypass mode in SecureROM, permanently compromising the hardware root of trust on all affected devices for their entire operational lifespan.
Source
bskyUnpatchable usbliter8 Exploit Permanently Compromises Apple A12 and A13 Devicesgizchina.comKey quotes
· 3 pulledNo software update can reach it.
No iOS patch will ever fix it.
Every affected device is permanently compromised at the hardware root of trust for the rest of its operational life.
You might also wanna read
Unpatchable iPhone Exploit A12 A13 Chips: usbliter8 Explained
Critical Hardware Vulnerability Found in Apple A16 Bionic Chip Enabling Debug Logic on Production Devices
This repository documents a critical hardware vulnerability in Apple's A16 Bionic chip where debug logic meant for development silicon is ex
github.com·10mo ago
Exploit Enables Modification of iOS MobileGestalt.plist to Unlock iPad Features on iPhone
The article describes how a newly released exploit (itunesstored & bookassetd sbx escape) enables modification of the MobileGestalt.plist fi
idevicecentral.com·7mo ago
Apple patches critical iOS zero-day vulnerability exploited in targeted attacks
Apple has patched a critical zero-day vulnerability (CVE-2026-20700) affecting every iOS version since 1.0, discovered by Google's Threat An
theregister.com·4mo ago
DarkSword iPhone Hacking Tool Discovered Targeting iOS 18 Devices Through Infected Websites
A powerful iPhone hacking technique called DarkSword has been discovered being used by Russian hackers to target iOS devices. The tool can t
wired.com·3mo ago
Security researcher publishes YellowKey zero-day exploit that bypasses Microsoft BitLocker encryption via USB stick
Security researcher Chaotic Eclipse (Nightmare-Eclipse) has published two new zero-day exploits targeting Microsoft systems after their prev
tomshardware.com·1mo ago
Comments
Sign in to join the conversation.
No comments yet. Be the first.