# iPhone BootROM Flaws (checkm8 CVE-2019-8900, usbliter8) Could Be Used to Undermine Cryptocurrency Wallet Security

> Unpatchable Apple SecureROM (BootROM) flaws - checkm8 (A5-A11, iPhone X and earlier) and usbliter8 (A12/A13, disclosed June 22, 2026 by Paradigm Shift) - let an attacker with physical USB access to a device in DFU mode execute code before iOS loads. A public PoC runs from a Raspberry Pi Pico 2 (RP2350). Encrypted user data and the Secure Enclave are not directly compromised, so wallet seed theft would require additional vulnerabilities.

- **Published:** 2026-11-02T18:38:17Z
- **Last reviewed:** 2026-11-02T18:38:17Z
- **Canonical:** https://intel.threadlinqs.com/threat/TL-2026-5077
- **Card image:** https://intel.threadlinqs.com/og/threat/TL-2026-5077.png
- **ID:** TL-2026-5077
- **Severity:** MEDIUM (CVSS 6.8)
- **Category:** VULNERABILITY
- **Status:** MONITORING
- **Detections:** 9 (1 shown free below) · **IOCs:** 12
- **CVEs:** CVE-2019-8900

## Description

Apple's SecureROM (BootROM) is the first code the application processor executes at boot. It lives in read-only silicon and cannot be updated by software patches. Two publicly known flaws in its USB Device Firmware Upgrade (DFU) handling allow an attacker with physical access to run unsigned code before iOS loads.

checkm8 (CVE-2019-8900, CERT/CC VU#941987) was publicly disclosed on September 27, 2019 by the researcher axi0mX. It is a use-after-free in the SecureROM USB DFU stack and affects devices with A5 through A11 SoCs (iPhone 4S through iPhone X, plus iPads, iPod touch, Apple Watch and Apple TV models with those chips). NVD scores it CVSS 3.1 6.8 MEDIUM (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, CWE-94). Exploitation requires the device to be connected to a host and placed in DFU mode; changes are not persistent across a reboot. CERT/CC states there is no practical patch and that device replacement is the only guaranteed mitigation.

usbliter8 was disclosed on June 22, 2026 by Paradigm Shift, a European security firm, with PoC code published at github.com/prdgmshift/usbliter8. It targets Apple A12 and A13 SoCs (iPhone XS, XR, 11 family, SE 2nd generation, and Apple Watch S4/S5 per SecurityWeek). It chains a USB controller bug with a device firmware configuration weakness; crafted USB setup packets trigger an out-of-bounds write that gives control before the OS loads, allowing unsigned boot components to be loaded and bypassing Apple's code verification. Public demonstrations used a Raspberry Pi Pico 2 (RP2350) as the USB exploit device; tested boards include Waveshare RP2350 USB-A, Waveshare RP2350 Zero and Pimoroni TINY2350. A related public demonstration booted a jailbroken iOS 27 beta build on an iPhone 11 Pro using an RP2350-based Pico 2, building on earlier work by wh1te4ever. A14/S6 and newer chips are unaffected, per Apple.

Cybersecurity News (November 2, 2026) frames these flaws as a risk to cryptocurrency wallet security. The exploits do not directly compromise the Secure Enclave, and encrypted user data stays behind additional barriers (passcode-derived keys, Data Protection). Stealing a wallet seed phrase would need further vulnerabilities, decrypted-data access, or attacks on remaining protections. Researchers note such exploits are highly useful to forensics vendors. No in-the-wild exploitation, threat actor, or malware is reported in the sources. Severity is analyst-assigned for usbliter8, which has no CVE in the sources.

## MITRE ATT&CK

- T1553 Subvert Trust Controls
- T1542 Pre-OS Boot
- T1542 Pre-OS Boot
- T1005 Data from Local System

## Free detection (Splunk SPL, Microsoft KQL, Sigma)

**Apple Device in DFU Mode Enumerated on Host — checkm8/usbliter8 Exploitation Precondition** (`TL-2026-5077-SPL-001`)

TL-2026-5077: Detects an Apple device enumerating in DFU mode (USB VID 05AC / PID 1227) via Windows Security 6416 PnP events. DFU mode is the mandatory precondition for the unpatchable SecureROM exploits checkm8 (CVE-2019-8900, A5-A11) and usbliter8 (A12/A13), which send crafted USB setup packets to the DFU stack before iOS loads. Behaviour-first: fires on the device state, not on a tool name.

- **Languages:** Splunk SPL, Microsoft KQL, Sigma
- **ATT&CK:** T1542, T1068, T1211
- **Data sources:** windows_security, wineventlog:Security EventCode 6416 (Audit PNP Activity)
- **Severity:** medium
- **Confidence:** medium

### Splunk SPL

```spl
index=wineventlog sourcetype="WinEventLog:Security" EventCode=6416 earliest=-24h | where match(_raw,"(?i)VID_05AC&PID_1227") OR match(_raw,"(?i)Apple Mobile Device .DFU Mode.") | stats count min(_time) as first_seen max(_time) as last_seen by host | eval first_seen=strftime(first_seen,"%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen,"%Y-%m-%d %H:%M:%S") | table host count first_seen last_seen
```

### Microsoft KQL

```kql
DeviceEvents
| where Timestamp > ago(24h)
| where ActionType == "PnpDeviceConnected"
| extend d = parse_json(AdditionalFields)
| extend DeviceId = tostring(d.DeviceId), DeviceDescription = tostring(d.DeviceDescription), ClassName = tostring(d.ClassName)
| where (DeviceId contains "VID_05AC" and DeviceId contains "PID_1227") or DeviceDescription contains "Apple Mobile Device (DFU Mode)"
| project Timestamp, DeviceName, DeviceId, DeviceDescription, ClassName, InitiatingProcessAccountName
| order by Timestamp desc
```

### Sigma

```yaml
title: Apple Device Enumerated in DFU Mode on Windows Host (checkm8 / usbliter8 Precondition)
id: 3f1c8a52-7b0e-4d6a-9c41-5e2a7d9b1a01
status: experimental
description: Detects an Apple device (USB VID 05AC, PID 1227) enumerating in DFU mode on a monitored Windows host. DFU mode is the required precondition for the SecureROM exploits checkm8 (CVE-2019-8900) and usbliter8.
references:
    - https://kb.cert.org/vuls/id/941987/
    - https://nvd.nist.gov/vuln/detail/CVE-2019-8900
    - https://github.com/prdgmshift/usbliter8
author: AII-Detector — ThreadLinqs Intelligence
date: 2026-11-02
tags:
    - attack.defense-evasion
    - attack.persistence
    - attack.privilege-escalation
    - attack.t1542
    - attack.t1068
    - attack.t1211
    - cve.2019-8900
logsource:
    product: windows
    service: security
detection:
    selection_event:
        EventID: 6416
    selection_id:
        DeviceId|contains: 'VID_05AC&PID_1227'
    selection_desc:
        DeviceDescription|contains: 'Apple Mobile Device (DFU Mode)'
    condition: selection_event and (selection_id or selection_desc)
falsepositives:
    - Authorized restore or recovery of iPhones by IT or repair staff
    - Mobile forensics lab workstations
level: medium

```

**Known false positives:**

- Authorized iPhone restore/recovery by IT, repair or MDM staff
- Mobile forensics or device-provisioning workstations that legitimately use DFU mode

**Tuning notes:** Enable Audit PNP Activity (Security 6416). Allowlist provisioning/forensics hosts by host or asset tag and alert only on hosts outside that set; enrich with asset owner and raise priority when the host also shows exploit tooling (KQL-001) or an RP2350 boot device (SIG-001).

### 8 more detection rules (Splunk SPL, Microsoft KQL, Sigma), unlock with TL Creds

- BootROM Exploit Tooling Execution — checkm8 / usbliter8 / ipwndfu / gaster (locked: unlock with TL Creds)
- USB-Tunnelled SSH to Jailbroken iOS Device (iproxy / ssh -p 2222) (locked: unlock with TL Creds)
- Web Proxy Access to usbliter8 PoC Repository (locked: unlock with TL Creds)
- RP2350 Microcontroller BOOTSEL Device Attached — usbliter8 Exploit Hardware (locked: unlock with TL Creds)
- iOS Keychain / App Container Data Pulled over SSH After BootROM Exploit (locked: unlock with TL Creds)
- Python pyusb Script Targeting Apple DFU Device (0x05ac:0x1227) (locked: unlock with TL Creds)
- Unsigned/Modified Boot Components Loaded via DFU Tooling (iBSS/iBEC/im4p) (locked: unlock with TL Creds)
- usbliter8 PoC Repository Retrieval via Command Line (locked: unlock with TL Creds)

Sign up free to unlock the detection rules: https://threadlinqs.com/?modal=signup

## Sources

- [Hackers Could Exploit iPhone BootROM Flaws to Compromise Cryptocurrency Wallet Security](https://cybersecuritynews.com/hackers-exploit-iphone-bootrom-flaws/)
- [New Exploit Bypasses Apple's Boot Defenses, Affects Millions of iPhones (SecurityWeek)](https://www.securityweek.com/new-exploit-bypasses-apples-boot-defenses-affects-millions-of-iphones/)
- [Paradigm Shift usbliter8 PoC repository](https://github.com/prdgmshift/usbliter8)
- [CERT/CC VU#941987 - Apple SecureROM use-after-free (checkm8)](https://kb.cert.org/vuls/id/941987/)
- [NVD - CVE-2019-8900](https://nvd.nist.gov/vuln/detail/CVE-2019-8900)
- [Usbliter8 Exploit - The Apple Wiki](https://theapplewiki.com/wiki/Usbliter8)
- [checkm8 Exploit - The Apple Wiki](https://theapplewiki.com/wiki/Checkm8)
- [Booted jailbroken iOS 27 on iPhone 11 Pro (Cybersecurity News)](https://cybersecuritynews.com/booted-jailbroken-ios-27-iphone-11-pro/)
- [Lookout - checkm8 iOS vulnerability](https://www.lookout.com/blog/checkm8)
- [Zimperium analysis of checkm8](https://zimperium.com/blog/zimperium-analysis-of-checkm8)
- [The Hacker News - bootrom jailbreak iOS exploit](https://thehackernews.com/2019/09/bootrom-jailbreak-ios-exploit.html)

## Full data

The other 8 detection rules (Splunk SPL / Microsoft KQL / Sigma) unlock with TL Creds; a free account includes daily creds: https://threadlinqs.com/?modal=signup
Indicator values unlock with TL Creds, at a lower price on Red and Purple; AI agents can query rules and IOCs through the Threadlinqs MCP server (Purple): https://intel.threadlinqs.com/mcp

Canonical: https://intel.threadlinqs.com/threat/TL-2026-5077