Unpatchable exploit leaves older iPhones exposed

The exploit, dubbed usbliter8, targets the USB controller and firmware to seize control of a device before the iOS operating system even initializes. By overriding the boot process, attackers can execute unauthorized software, provided they have physical access to the handset. This hardware-level flaw specifically affects devices powered by A12 and A13 chips, including the iPhone 11 series, the iPhone XR, the XS lineup, and the second-generation iPhone SE.

Beyond smartphones, the vulnerability extends to various tablets and wearables, including the Apple Watch Series 4 and 5, as well as several iPad generations. The researchers noted that the exploit could potentially allow for the compromise of the Secure Enclave Processor, the vault where Apple stores passcodes and encrypted sensitive data. Given that the underlying code cannot be patched or extracted from the chips, the research team suggests that upgrading to newer hardware is the only reliable way to eliminate the security risk.