New unpatchable exploit targets Apple devices with A12 and A13 chips

Researchers at Paradigm Shift have published the technical details of usbliter8, a new unpatchable iPhone BootROM vulnerability.

Researchers at Paradigm Shift have published the technical details of usbliter8, a new unpatchable iPhone BootROM vulnerability that affects devices powered by Apple's A12 and A13 chips. The vulnerability enables arbitrary code execution, allowing hackers to gain control of the device. This exploit is particularly significant as it cannot be patched by Apple, leaving millions of devices vulnerable. The affected chips are found in iPhone models such as the iPhone XS, iPhone XS Max, and iPhone 11.

This vulnerability directly affects iPhone users who rely on their devices for sensitive transactions, such as mobile payments and online banking. As a result, users may be at risk of having their financial information compromised, potentially leading to significant financial losses. The vulnerability also puts users' personal data at risk, including contacts, emails, and photos. This could have serious consequences for individuals who store sensitive information on their devices.

The discovery of usbliter8 is not an isolated incident, but rather part of a larger pattern of vulnerabilities found in Apple's BootROM. In recent years, several similar exploits have been discovered, highlighting the need for improved security measures in Apple's devices. Insiders know that the BootROM is a critical component of Apple's devices, responsible for loading the operating system and initializing the device's hardware. The fact that usbliter8 is unpatchable suggests that Apple may need to re-examine its approach to device security.

In the coming weeks, Apple is expected to release a statement addressing the usbliter8 vulnerability and providing guidance to affected users. A report by Paradigm Shift is scheduled to be presented at an upcoming security conference, where researchers will provide further details on the exploit. Interestingly, the discovery of usbliter8 may actually lead to improved device security in the long run, as it highlights the need for more robust security measures and prompts Apple to re-evaluate its approach to device security. The fact that usbliter8 is unpatchable may ultimately lead to the development of more secure devices.