usbliter8 Exploit Enables Unpatchable SecureROM Code Execution on Apple A12 and A13
Summary
Paradigm Shift published usbliter8, a physical DFU-mode USB exploit for Apple A12/A13 SecureROM. It requires an RP2350-based board, can boot unsigned iBoot images, and cannot be fixed by software updates; no in-the-wild use had been publicly reported.
Key points
- The exploit requires physical access, DFU mode, and a USB connection to an RP2350-based board; the article says it completes in under two seconds.
- A flaw in the Synopsys DWC2 USB controller causes a DMA write-pointer underflow; Apple's DART bypass configuration lets it reach and overwrite SRAM.
- On A12, the exploit overwrites a saved link register; on A13, it bypasses PAC protections and overwrites the USB interrupt handler pointer.
- The public proof of concept supports A12, A13, S4, and S5 SoCs; A12X and A12Z support is described as possible but not implemented.
- The exploit can run code in SecureROM and boot unsigned iBoot images. The research does not demonstrate a Secure Enclave compromise.
- The flaw is in silicon and cannot be fixed with a software update. As of June 19, 2026, no in-the-wild exploitation had been publicly reported; the article recommends device inventory, controlled USB access, and prioritizing refreshes to A14 or newer.
Article Details
- Attack Vectors
- Physical possession of an affected device, DFU mode, and a USB connection to an RP2350-based board are required.
- On A12, DMA buffer underflow can overwrite memory adjacent to the USB task stack; on A13, the exploit bypasses PAC and overwrites the USB interrupt handler pointer.
- The exploit achieves code execution inside SecureROM and can boot a raw, unsigned iBoot image without signature checks.
- Defensive Notes
- The flaw is in silicon and cannot be fixed by a software or firmware update.
- Control physical access to affected devices and where they can be connected; avoid DFU mode over untrusted USB cables or hosts.
- Inventory A12, A13, S4, and S5 devices in sensitive roles and prioritize refreshes to A14 or newer.
- The article reports no publicly known in-the-wild exploitation as of 2026-06-19.
MITRE ATT&CK
Vendors
AppleResearchers at Paradigm Shift published usbliter8, a working exploit that achieves arbitrary code execution in the SecureROM of Apple A12 and A13 chips through a physical DFU-mode USB attack.SynopsysThe root cause is a flaw in the Synopsys DWC2 USB controller and Apple’s DART bypass configuration.
Products
A12Researchers at Paradigm Shift published usbliter8, a working exploit that achieves arbitrary code execution in the SecureROM of Apple A12 and A13 chips through a physical DFU-mode USB attack.A13Researchers at Paradigm Shift published usbliter8, a working exploit that achieves arbitrary code execution in the SecureROM of Apple A12 and A13 chips through a physical DFU-mode USB attack.HomePod miniThe flaw is permanent on affected devices and extends the same kind of unpatchable risk previously seen with checkm8, impacting devices such as the iPhone XS, iPhone 11, Apple Watch Series 4 and 5, and the HomePod mini.iPhone 11The flaw is permanent on affected devices and extends the same kind of unpatchable risk previously seen with checkm8, impacting devices such as the iPhone XS, iPhone 11, Apple Watch Series 4 and 5, and the HomePod mini.iPhone XSThe flaw is permanent on affected devices and extends the same kind of unpatchable risk previously seen with checkm8, impacting devices such as the iPhone XS, iPhone 11, Apple Watch Series 4 and 5, and the HomePod mini.RP2350The exploit requires physical access, DFU mode, and a USB connection to an RP2350-based board.S4The public PoC supports A12, A13, S4, and S5 SoCs.S5The public PoC supports A12, A13, S4, and S5 SoCs.SecureROMResearchers at Paradigm Shift published usbliter8, a working exploit that achieves arbitrary code execution in the SecureROM of Apple A12 and A13 chips through a physical DFU-mode USB attack.Synopsys DWC2 USB controllerThe root cause is a flaw in the Synopsys DWC2 USB controller and Apple’s DART bypass configuration.