3 ms·

Full TrustZone exploit for MSM8974

• laginimaineb 11y ago
  (Disclaimer: I'm the author of this blog) In this post I cover the development of a full TrustZone exploit in MSM8974 (Snapdragon 800) SoCs, resulting in arbitrary code execution in the "Secure World". I've also provided the full source code! Please let me know if you have any questions/comments.
  • penguat 11y ago
    Have you been through some sort of responsible disclosure? I don't know enough to tell if this is an immediately usable vulnerability.
    • laginimaineb 11y ago
      Sure, see the first part of the blog post, under "Responsible Disclosure"
• DiGMi 11y ago
  Great job!
  • laginimaineb 11y ago
    Thanks! More to follow soon :)