Security researchers at Paradigm Shift have published a working exploit, dubbed usbLiter8, that achieves arbitrary code execution inside the SecureROM of Apple's A12 and A13 chips. The SecureROM is burned into the silicon at manufacture, meaning no software update can alter or patch it. Affected devices will carry this vulnerability for as long as they remain in use.
The exploit targets a fundamental weakness in the boot chain's most protected layer. Because SecureROM is read-only memory etched during chip fabrication, the flaw is effectively unpatchable. The attack is not remotely exploitable—it requires physical USB access to the device, limiting but not eliminating the threat surface.
usbLiter8 works by sending malformed USB commands during the device's early boot process, before the operating system loads. This forces SecureROM to execute arbitrary payloads, effectively bypassing Apple's hardware-level security measures. Researchers have not yet released a list of specific indicators of compromise, but the exploit leaves no trace in the OS or file system since it operates entirely below the software layer.
The only mitigation is hardware replacement: users must swap out the affected chip entirely. Apple has not commented on the exploit or announced a recall or replacement program. Device owners can reduce risk by avoiding untrusted USB connections and keeping devices physically secure.
Attribution for the exploit is clear—Paradigm Shift researchers are credited—but no broader threat group has claimed involvement. The discovery underscores the growing challenge of silicon-level vulnerabilities that persist beyond software's reach, raising questions about long-term device security in an era of non-updatable hardware.