TECHNOLOGY

United States researchers disclose unpatchable Apple chip exploit

PUBLISHED Jun 20, 2026, 11:09 AM ET

Read, Watch or Listen

United States-based security firm Paradigm Shift has disclosed a proof-of-concept exploit, dubbed “usbliter8,” that targets a critical SecureROM vulnerability in Apple’s A12 and A13 processors. The flaw resides in the read-only memory that is burned into the chip at the time of manufacture, meaning it cannot be altered or corrected through iOS software updates. As a result, affected devices remain permanently exposed to this class of attack for the lifetime of the hardware. The usbliter8 exploit enables arbitrary code execution during the earliest stages of the boot process, giving an attacker control of the device before the operating system and its protections load and rendering later security measures such as sandboxing and kernel defenses ineffective. United States analysts report that the vulnerable A12 and A13 chips power a wide range of still-active Apple products, including the iPhone XS, the iPhone 11 series, and several iPad models. Researchers say a successful attack typically requires physical access to the device or a specialized connection through the Lightning or USB port, which may limit large-scale remote exploitation but does not remove the underlying danger. They warn that the permanence of the hardware-level flaw poses a significant long-term risk, particularly for users and organizations operating in high-security environments. Apple has not yet issued a formal public statement on the disclosure, while privacy advocates describe the case as an example of how hardware-baked vulnerabilities can persist for the entire life of a product.

By Sarah Whitman | JQJO News

Timeline of Events

2018 Apple launches A12 Bionic processors
2019 Apple releases iPhone 11 lineup
Recent years A12 and A13 widely deployed
This month Paradigm Shift completes vulnerability research
Earlier this week usbliter8 exploit publicly disclosed
Today Apple has not issued formal statement
Soon analysts may advise hardware recalls
Long term affected devices remain permanently vulnerable

News Intelligence

If you own an iPhone XS, iPhone 11, or certain iPads, your device may be at risk. The "usbliter8" exploit targets a flaw in your device's processor. It's a hardware issue, so software updates can't fix it. Make sure to guard your device against unauthorized physical access.