Apple devices vulnerable to boot ROM race condition

ronjor · Dec 19, 2019

Vulnerability Note VU#941987
Original Release Date: 2019-12-19 | Last Revised: 2019-12-19

Overview
Some Apple devices are vulnerable to arbitrary code execution at the Boot ROM level by exploiting a race condition. Successful exploitation results in the ability to execute arbitrary code on the device.
Solution
The CERT/CC is currently unaware of a practical solution to this problem. Because the vulnerability exists in the read-only Boot ROM, replacing the device with one that does not contain a vulnerable processing chip is the only solution that guarantees immunity to the vulnerability.
Click to expand...

Log in or Sign up

Apple devices vulnerable to boot ROM race condition

ronjor Global Moderator

Log in or Sign up

Apple devices vulnerable to boot ROM race condition

ronjor Global Moderator

Useful Searches