usbliter8 exploit achieves arbitrary code execution in Apple SecureROM

Intelligence Summary

Security researchers demonstrated the usbliter8 exploit to run arbitrary code within Apple A12 and A13 SecureROM. The code is burned into the chip during manufacturing, so conventional software updates cannot remove it. Because the affected SecureROM logic is compromised, devices may remain vulnerable for their lifetime. The reported scenario is not a remote attack and requires local conditions to trigger. Users and defenders should assume hardware-level risk persists and focus on mitigation through access control and device handling.

Recommended Action

Prioritize immediate review, validate exposure, and patch or mitigate affected systems.

Topics