Researchers uncover an unpatchable security flaw affecting several iPhone generations
Key Points:
- Researchers at Paradigm Shift identified a security flaw called "usbliter8" affecting Apple devices with A12, A13, S4, and S5 chips, including various iPhone, iPad, Apple TV, Studio Display, and Apple Watch models.
- The exploit leverages a hardware bug in the USB controller and a firmware configuration flaw, allowing attackers to inject custom code before iOS boots by confusing the USB controller in DFU mode.
- This vulnerability is unpatchable via software updates, but attackers must have physical access to the device to exploit it, and the Security Enclave containing sensitive data remains unaffected.
- Apple collaborated with researchers to address the issue, but the recommended solution for affected users is to upgrade to newer devices, as older models with A11 chips are not vulnerable.