125 matches found
Out-of-bounds
In Chromecast bootROM, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the bootloader, with physical USB access, with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2021-0467
CVE-2021-0467 affects Chromecast bootROM with an out-of-bounds write caused by an incorrect bounds check. This allows local escalation of privilege in the bootloader with physical USB access and no user interaction. The Android bulletin notes fixes at 2021-05-01/2021-05-05 patch levels; no exploi...
CVE-2021-0467
In Chromecast bootROM, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the bootloader, with physical USB access, with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2021-0467: Out-of-bounds Write
In Chromecast bootROM, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the bootloader, with physical USB access, with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
HPE Intelligent Management Center (iMC) deployselectbootrom Expression Language Injection Remote Code Execution Vulnerability
HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...
Unpatched Apple T2 Chip Flaw Plagues Macs
A researcher is claiming that Apple devices – with a macOS operating system and a T2 security chip – are open to an exploit that could give bad actors root access. A fix has not been issued by Apple. The flaw stems from the T2 chip, which is the second-generation version of Apple’s chip that...
You Can Now Run Android on an iPhone With 'Project Sandcastle'
Not happy with your expensive iPhone and wondered if it's possible to run any other operating system on your iPhone, maybe, how to install Android on an iPhone or Linux for iPhones? Android phones can be rooted, and iPhones can be jailbroken to unlock new features, but so far, it's been close to...
Security Bulletin: Jetson AGX Xavier, TK1, TX1, TX2, and Nano L4T- December 2019
NVIDIA has released a software security update for Jetson AGX Xavier, TK1,TX1, TX2, and Nano in the NVIDIA® Tegra® Linux Driver Package L4T. The update addresses issues that may lead to code execution, denial of service, escalation of privileges, or information disclosure. To protect your system,...
Apple iPhone 3GS Non-Null Pointer Vulnerability
The Apple iPhone 3GS is a smartphone from the American company Apple. A security vulnerability exists in the Apple iPhone 3GS old bootrom and new bootrom. An attacker can exploit the vulnerability to install arbitrary firmware...
CVE-2019-9536
Apple iPhone 3GS bootrom malloc implementation returns a non-NULL pointer when unable to allocate memory, aka 'alloc8'. An attacker with physical access to the device can install arbitrary firmware...
CVE-2019-9536
Apple iPhone 3GS bootrom malloc implementation returns a non-NULL pointer when unable to allocate memory, aka 'alloc8'. An attacker with physical access to the device can install arbitrary firmware...
CVE-2019-9536
CVE-2019-9536 affects the Apple iPhone 3GS bootrom malloc implementation, which returns a non-NULL pointer when memory allocation fails (alloc8). The vulnerability enables an attacker with physical access to install arbitrary firmware on the device. The connected documents provide the affected co...
CVE-2019-9536: Improper Handling of Exceptional Conditions
Apple iPhone 3GS bootrom malloc implementation returns a non-NULL pointer when unable to allocate memory, aka 'alloc8'. An attacker with physical access to the device can install arbitrary firmware...
iPhone BootROM vulnerability description and threat assessment-vulnerability warning-the black bar safety net
0x00-related vocabulary AP: application processor. SEP: security coprocessor. SecureROM: also known as the BootROM is cured in the iPhone the read-only area in the section of the code, the area code is to start the chain and start the chain of trust starting point, the main responsible for loadin...
iOS Exploit 'Checkm8' Could Allow Permanent iPhone Jailbreaks
A researcher is warning of an un-patchable bug affecting hundreds of millions of iPhones that gives attackers system-level access to handsets via an unblockable jailbreak hack. Right now, the scope of the attack is limited. The exploit is dubbed “checkm8” by a security researcher who goes by the...
New iOS exploit checkm8 allows permanent compromise of iPhones
UPDATE 9/27, 11:00am: Updated for the misconception that the bootrom was actually being modified. Apparently, the "permanent" only refers to the fact that the bug is in the bootrom, where it cannot be patched. UPDATE 9/27, 12:15am: After speaking with @axi0m8, clarified a few other points,...
Hacker Releases 'Unpatchable' Jailbreak For All iOS Devices, iPhone 4s to iPhone X
An iOS hacker and cybersecurity researcher today publicly released what he claimed to be a "permanent unpatchable bootrom exploit," in other words, an epic jailbreak that works on all iOS devices ranging from iPhone 4s A5 chip to iPhone 8 and iPhone X A11 chip. Dubbed Checkm8, the exploit leverag...
Hacker Releases 'Unpatchable' Jailbreak For All iOS Devices, iPhone 4s to iPhone X
An iOS hacker and cybersecurity researcher today publicly released what he claimed to be a "permanent unpatchable bootrom exploit," in other words, an epic jailbreak that works on all iOS devices ranging from iPhone 4s A5 chip to iPhone 8 and iPhone X A11 chip. Dubbed Checkm8, the exploit leverag...