CERT24Usbliter8 enables arbitrary code execution in the SecureROM of Apple A12 and A13 chipsLoading data…
CERT24Threat Observatory
Period

Usbliter8 enables arbitrary code execution in the SecureROM of Apple A12 and A13 chips

Paradigm Shift published a working exploit named usbliter8 that enables arbitrary code execution inside the SecureROM of Apple A12 and A13 chips. The attack requires physical possession of the device, DFU mode, and a USB connection to a dedicated RP2350-based microcontroller. Because the issue is in code burned into the chip during manufacture, it cannot be fixed with a software update.

← Back to intelligence

Usbliter8 enables arbitrary code execution in the SecureROM of Apple A12 and A13 chips

Paradigm Shift published a working exploit named usbliter8 that enables arbitrary code execution inside the SecureROM of Apple A12 and A13 chips. The attack requires physical possession of the device, DFU mode, and a USB connection to a dedicated RP2350-based microcontroller. Because the issue is in code burned into the chip during manufacture, it cannot be fixed with a software update.