Researchers Identify Unpatchable BootROM Vulnerability Affecting Apple Devices with A12 and A13 Chips

• June 19, 2026

Security experts have disclosed a significant vulnerability affecting Apple devices equipped with the A12 and A13 chipsets. The flaw, identified by researchers from Paradigm Shift, is an unpatchable BootROM exploit dubbed usbliter8. This vulnerability stems from inherent hardware weaknesses, allowing attackers to execute arbitrary code on the targeted devices.

Unpatchable BootROM Exploit Targets Apple A12 and A13 Devices

The discovery highlights a critical security concern for users of Apple products relying on the A12 and A13 processors, as the Boot Read-Only Memory (BootROM) is a foundational element in the device’s boot process. Because it is a hardware-based component that cannot be updated after manufacturing, any vulnerabilities within it present a persistent risk.

The usbliter8 exploit leverages these hardware-level flaws, bypassing traditional software defenses and enabling code execution at the earliest stage of device startup. This capability potentially creates a pathway for jailbreaking, a process that removes software restrictions imposed by Apple, thereby granting deeper access to the system.

Traditionally, security patches delivered through software updates mitigate many vulnerabilities. However, in the case of BootROM exploits like usbliter8, such corrections are unattainable, as the flaw resides in immutable hardware. This means affected devices remain perpetually vulnerable unless hardware changes are made.

Paradigm Shift’s technical publication detailing the exploit sheds light on the complex mechanisms used to manipulate the BootROM, emphasizing the challenge faced by both Apple and users in addressing this security gap. While the exploit reveals potential risks, the practical implications depend on an attacker’s ability to deploy the exploit under specific conditions.

The vulnerability’s existence underscores the ongoing challenges in balancing advanced hardware design with robust security protections. As Apple continues to innovate new chip architectures, ensuring that foundational components like BootROM are secure remains a critical focus for safeguarding user data and device integrity.

In the wake of this disclosure, users and organizations relying on A12 and A13 chip-based Apple devices should remain vigilant. While an outright fix is not feasible, understanding the scope and nature of the vulnerability is essential for risk management and developing mitigation strategies.

A new unfixable BootROM flaw called usbliter8 has been uncovered in Apple devices with A12 and A13 processors, enabling arbitrary code execution.