Unpatchable Boot ROM flaw exposes older iPhone models

The vulnerability targets the initial code executed upon powering an iPhone, effectively undermining the device’s primary line of defense. By exploiting this flaw, which requires physical connection to the handset, researchers or malicious actors can bypass critical security checks. While the discovery is significant, it does not grant immediate access to user data; successful exploitation typically requires chaining this bug with additional vulnerabilities to achieve a full jailbreak.

Because the flaw exists in immutable hardware, the only definitive defense is hardware migration. The release of this information provides a rare look into the methods used by firms like Cellebrite and Magnet Forensics, which often develop proprietary tools to assist law enforcement. Historically, public jailbreaks served as a gateway for security research, but such releases have dwindled as researchers prioritize keeping valuable exploits private to avoid Apple’s patching cycles. Paradigm Shift has remained silent regarding the public disclosure of their findings.