Apple’s a12 & a13 bionic chips face critical security hole
A newly discovered vulnerability in apple’s legacy A-series Bionic processors – specifically the A12 and A13 chips – poses a serious risk to user data. Security researchers at Paradigm Shift have identified a ‘BootROM flaw’ that could allow unauthorized code execution on iPhones from the iPhone 4S to the iPhone 11 Pro Max.
The root of the problem: a usb controller bug
The flaw originates in the USB controller hardware within these older devices. Essentially, a misinterpretation of small USB data packets can corrupt memory locations, creating a pathway to bypass iOS security measures. It’s not a software issue, but a fundamental hardware defect, dating back to the iPhone 4S and persisting through the iPhone 11 Pro Max.
Apple’s response – or lack thereof
Unlike previous vulnerabilities like ‘checkm8’ which apple patched with software updates, this BootROM flaw is embedded within the chip itself. This means apple cannot remotely fix the issue. Paradigm Shift’s analysis confirms the root cause lies within the hardware’s USB controller, not within iOS software.
Affected devices – a long list
The vulnerable iPhone models include: the iPhone 4S (A5), iPhone 5 (A6), iPhone 5c (A6), iPhone 5s (A7), iPhone 6 & 6 Plus (A8), iPhone 6s & 6s Plus (A9), iPhone SE (1st Generation) (A9), iPhone 7 & 7 Plus (A10 Fusion), iPhone 8 & 8 Plus (A11 Bionic), iPhone X (A11 Bionic), iPhone XR (A12 Bionic), iPhone XS (A12 Bionic), iPhone XS Max (A12 Bionic), iPhone 11 (A13 Bionic), iPhone 11 Pro (A13 Bionic), iPhone 11 Pro Max (A13 Bionic), and iPhone SE (2nd generation - A13 Bionic).
The good news: passwords remain secure
Despite the severity, users aren’t immediately facing a widespread data breach. The researchers emphasize that passcodes and encrypted user data remain protected. However, the potential for malicious actors to load custom software is a genuine concern – a frightening prospect for anyone who’s ever relied on their iPhone for sensitive information.
The only solution: upgrade
Paradigm Shift’s conclusion is stark: the only secure solution is to upgrade to a newer iPhone model. The A11 Bionic chip, found in the iPhone 8 and iPhone X, is considered safe due to its memory pointer reset mechanism. Similarly, the A14 and later chipsets have been addressed with hardware fixes. This isn’t a matter of convenience; it’s a matter of safeguarding your digital life.