Researchers drop checkm8-style BootROM exploit for A12 and A13 iPhones

Researchers disclosed "usbliter8", a BootROM/SecureROM exploit impacting Apple devices with A12 and A13 chips (iPhone XS/XR/11 series). The vulnerability, in the Synopsys DesignWare USB controller, allows memory corruption while a device is in DFU mode, enabling attackers with physical access to run unsigned code, load custom iBoot images, and compromise the SecureROM; the flaw is unpatchable in affected hardware, Apple was notified, and the only definitive mitigation described is replacing affected devices.