Apple’s a12 & a13 bionic chips face serious security risk

Published on 19/06/2026 06:07 in technology • Dorothy Thompson

A newly discovered vulnerability in Apple’s legacy A12 and A13 Bionic processors could allow hackers to bypass security measures and potentially run unauthorized code on older iPhones.

A hidden threat lurks in iphone chipsets

Security researcher Paradigm Shift has identified a BootROM flaw affecting devices like the iPhone XR, XS, 11 series, and the SE (2nd generation). This isn’t a software issue; it’s a fundamental design problem embedded within the chip itself, rendering a software patch impossible.

This mirrors a similar, earlier vulnerability – “checkm8” – that plagued iPhones from the 4S to the X. The ‘usbliter8’ flaw, as it’s being called, centers around a USB controller hardware issue, completely independent of Apple’s iOS software – a crucial distinction. Essentially, the chip misinterprets USB data packets, leading to corrupted memory and the potential for malicious code execution.

The bottom line: upgrade or remain vulnerable

The bottom line: upgrade or remain vulnerable

The implications are stark. While passcode protection and encrypted data remain secure, the flaw allows attackers to potentially inject and run their own code before the operating system loads. Paradigm Shift is unequivocal: the only solution is an upgrade to a neweriPhone model. The A11 Bionic is safe thanks to a reset mechanism, and the A14 and later processors have been addressed through hardware fixes.

Affected Models: iPhone 4S (A5), iPhone 5 (A6), iPhone 5c (A6), iPhone 5s (A7), iPhone 6 & 6 Plus (A8), iPhone 6s & 6s Plus (A9), iPhone SE (1st Generation) (A9), iPhone 7 & 7 Plus (A10 Fusion), iPhone 8 & 8 Plus (A11 Bionic), iPhone X (A11 Bionic), iPhone XR (A12 Bionic), iPhone XS (A12 Bionic), iPhone XS Max (A12 Bionic), iPhone 11 (A13 Bionic), iPhone 11 Pro (A13 Bionic), iPhone 11 Pro Max (A13 Bionic), iPhone SE (2nd generation - A13 Bionic).

This isn’t a theoretical concern; it's a tangible risk. Apple’s response to ‘checkm8’ highlighted the severity – a problem with the chip, not the code. Don’t be fooled by the complexity; the takeaway is simple: if you’re still running an iPhone 4S or an older model, you’re exposed. The race to patch this flaw is over; the only viable defense is an upgrade. It's a sobering reminder that even the most sophisticated Technology isn't immune to inherent design vulnerabilities.