CVE-2026-40003

CVE-2026-40003，又名 Joselito，是在 ZXIC/Sanechips ZX297520V3 SoC BootROM 中发现的一个任意内存写入漏洞。 !CAUTION 此 PoC 仅用于研究目的发布。您不得 将此漏洞利用用于任何恶意目的。请勿 在您不拥有的设备上或未经所有者明确同意的情况下使用此漏洞利用。 状态 自 2026 年 3 月起，该漏洞应在较新的 SoC 修订版中得到修复。目前尚无已知产品使用已修补的芯片。所有现有设备均存在漏洞。 它是如何工作的？ TL;DR：查看loader 代码。 BootROM 从 0x4 地址开始，堆栈指针位于...

Exploit for CVE-2026-40003

CVE-2026-40003 aka Joselito is arbitrary memory write vulnerabil...

CVE-2026-40003

ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validation in the USB download mode to write data to any location in BootROM runtime memory, thereby overwriting the stack, hijacking the execution flow,...

CVE-2026-40003 USB-based arbitrary memory write vulnerability in ZTE ZX297520V3 soc BootROM

ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validation in the USB download mode to write data to any location in BootROM runtime memory, thereby overwriting the stack, hijacking the execution flow,...

CVE-2026-40003

CVE-2026-40003 describes a USB-based arbitrary memory write vulnerability in the ZTE ZX297520V3 BootROM. The issue arises from lack of target address validation in the USB download mode, allowing writes to arbitrary locations in BootROM runtime memory. Potential consequences, as stated, include o...

PT-2026-38322

Name of the Vulnerable Software and Affected Versions ZTE ZX297520V3 affected versions not specified Description The BootROM contains an issue allowing arbitrary memory writes via USB. Due to a lack of target address validation in the USB download mode, it is possible to write data to any locatio...

ZTE ZX297520V3 缓冲区错误漏洞

ZTE ZX297520V3 is an industrial-grade 4G module from ZTE Corporation. The ZTE ZX297520V3 has a buffer error vulnerability. This vulnerability stems from the lack of target address verification in the USB download mode, which may allow arbitrary memory writes. As a result, it can overwrite the...

EUVD-2019-13060

Malware in sbrugna...

CVE-2019-3421

The 7520V3V1.0.0B09P27 version, and all earlier versions of ZTE product ZX297520V3 are impacted by a Command Injection vulnerability. Unauthorized users can exploit this vulnerability to control the user terminal system...

CVE-2019-3421

The vulnerability CVE-2019-3421 affects the ZTE ZX297520V3 platform (7520V3V1.0.0B09P27 and earlier) and is described as a Command Injection that could let unauthorized users take control of the user terminal system. The CVEs and related records (NVD, Red Hat, prion listing) confirm affected prod...

CVE-2019-3421

The 7520V3V1.0.0B09P27 version, and all earlier versions of ZTE product ZX297520V3 are impacted by a Command Injection vulnerability. Unauthorized users can exploit this vulnerability to control the user terminal system...