Unpatchable usbliter8 Exploit Targets Apple A12 and A13 Devices

A newly disclosed BootROM vulnerability, named usbliter8, affects Apple devices with A12 and A13 chips, including iPhone XS, XR, and 11 models. This exploit allows attackers to gain control over the device's boot process by sending specially crafted USB packets during Device Firmware Update (DFU) mode. The vulnerability arises from flaws in the Synopsys DesignWare USB controller and cannot be patched due to its presence in immutable SecureROM code. Affected devices include older iPads and Apple Watches powered by S4 and S5 chips. The exploit requires physical access to the device, making widespread exploitation less likely. However, it opens avenues for compromising the Secure Enclave, which protects sensitive user data. Researchers from Paradigm Shift disclosed the vulnerability on June 18, 2026, coordinating with Apple prior to public release. Users are advised to upgrade to newer hardware to mitigate risks.

Key Points: • The usbliter8 exploit affects Apple A12 and A13 chips, allowing full control of affected devices. • Exploitation requires physical access and uses flaws in the USB controller during DFU mode. • The vulnerability is unpatchable, residing in immutable SecureROM code, leaving devices permanently exposed.