Critical BootROM Security Vulnerability Affects Millions of iPhones

Ender Öztürk

June 19, 2026

Security researchers at Paradigm Shift have identified a critical, unpatchable BootROM security vulnerability that impacts millions of iPhone models equipped with Apple’s A12 and A13 Bionic chips. This hardware-level flaw allows attackers to bypass system security by infiltrating the device via the USB controller, posing a permanent threat that cannot be fixed through standard iOS software updates. The discovery affects popular models including the iPhone XS, XR, and the iPhone 11 series, as the issue is deeply embedded within the initial boot code architecture established during the manufacturing process of these specific chipsets.

Software Updates Fail to Resolve Hardware Vulnerability

The core issue stems from the fact that the vulnerability resides within the BootROM, which is hard-coded into the device hardware during production. Because this code is immutable once it leaves the factory, no amount of software patching can remove the flaw. Modern cybersecurity standards dictate that hardware-based vulnerabilities of this nature usually require a complete physical replacement of the affected device to fully mitigate the risk of intrusion.

Millions of iPhone users remain unable to fully secure their devices against this architectural design flaw through manufacturer software updates.

Affected Hardware Models are Identified

The research confirms that the vulnerability impacts a wide range of devices, specifically those running on A12 and A13 silicon. This includes the iPhone XS, XS Max, and XR, as well as the entire iPhone 11 lineup. While researchers noted that exploiting the A12 chip is relatively straightforward, attacking the A13 chip requires more sophisticated methods to bypass the Pointer Authentication Codes (PAC). {{WP_IMAGE_1}}

Apple has successfully addressed this hardware flaw in the A14 processor architecture and all subsequent chip generations.

USB Data Packets Facilitate Unauthorized Access

The exploitation method, dubbed ‘usbliter8,’ leverages specific data sequences sent through the USB port to gain unauthorized access to restricted memory areas. This process enables potential attackers to disable fundamental security firewalls or tamper with essential system files. Since the issue is tied to the physical architecture of the USB controller, it represents a permanent security exposure for users of these specific iPhone generations. As Apple continues to evolve its security protocols, this discovery highlights the inherent risks associated with hardware-bound vulnerabilities that persist long after a product’s initial release.

How do you feel about the long-term security implications of hardware-level flaws in your smartphone, and would this discovery influence your decision to upgrade to a newer model? Please share your thoughts and concerns in the comments section below.