New iPhone BootROM Vulnerability Exposes Apple SoCs to Full Chain-of-Trust Compromise

A novel BootROM vulnerability, dubbed usbliter8, affects Apple devices powered by A12, S4/S5, and A13 SoCs. The exploit chains a hardware-level bug in the Synopsys DWC2 USB controller with a firmware configuration flaw, enabling full application processor boot-chain compromise with no software patch possible due to the immutable nature of BootROM code. According to Paradigm […] The post New iPhone BootROM Vulnerability Exposes Apple SoCs to Full Chain-of-Trust Compromise appeared first on Cyber Security News.