CVE-2022-38691_38692

CVE-2022-38691/38692 persistently boot FDL1/SPL without signature NOTE: first remove sign check of Boot Chain images in FDL1/SPL ​ fdl1 use genfdl1-dl sourcecode ​ spl android 9/10, use genspl-unlock-legacy sourcecode ​ spl android 11+, use genspl-unlock sourcecode ​ windows prebuilt tools can be...

spd_flasher

CVE-2022-38694 Hardened Exploit — RP2350 USB Host Auto Flasher 中文版 README Tutorial UDX710 Boot Chain Reverse Engineering and RP2350 Hardened Boot Tutorial Exploiting CVE-2022-38694 Unisoc BootROM vulnerability via Raspberry Pi RP2350 USB Host to automatically send SPL Loader on boot and start...

vankyo-s30-bootloader-unlock

Vankyo S30 Bootloader Unlock Unlock the bootloader on a Vankyo MatrixPad S30 Unisoc SC9863A using the CVE-2022-38694 FDL1 method. The S30's BootROM accepts unsigned FDL1 in download mode without requiring the ROP bypass, which simplifies the unlock significantly. Quick Start ./unlock.sh --prebuil...

CVE-2022-38693: Improper Restriction of Operations within the Bounds of a Memory Buffer

In FDL1, there is a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...