DEF CON 32 - From getting JTAG on the iPhone 15 to hacking Apple's USB-C Controller - Stacksmashing

[BLUF: The speaker demonstrates how to achieve code execution and firmware dumping on Apple’s USB-C Port Controller (Ace3) in the iPhone 15 and MacBook Pro M3 using electromagnetic fault injection, despite the chip’s lack of documentation and secure boot.]

Key Takeaways:
• The Ace3 USB-C controller in Apple devices contains undocumented firmware and debug ports, enabling reverse engineering via vendor-defined messages and JTAG-like access 14:10.
• A vulnerability allows bypassing secure boot by modifying external flash patches, enabling persistent firmware changes even after system restore 15:52.
• Using electromagnetic fault injection, the speaker successfully dumped the Ace3 ROM and RAM by analyzing side-channel EM emissions and timing glitches 28:00.
• A simple memory read payload was built by exploiting a shared USB W command handler between Ace2 and Ace3, enabling arbitrary memory access 34:17.

[This work reveals a path to reverse-engineering undocumented hardware and highlights the potential for persistent attacks on Apple’s USB-C controllers.]

Sources:

• 14:10 Discussion of debug ports, SWD access, and external flash patching in Ace2/Ace3.
• 15:52 Explanation of patchable signature verification and persistent firmware modifications.
• 28:00 Description of electromagnetic fault injection and side-channel timing analysis.
• 34:17 Demonstration of memory read exploit using shared USB W command handler.