PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Being Overlord on the Steam Deck with 1 Byte

blog.quarkslab.com | research | #exploitation | #vulnerability | #amd | #steam-deck | #uefi | #smm
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab presents two SMM bugs in AMD firmware drivers affecting the Steam Deck and other AMD devices, turning restrictive 1-byte primitives into code execution in System Management Mode.
Published
Collected

Related coverage

research · blog.quarkslab.com
For Science! - Using an Unimpressive Bug in EDK II to Do Some Fun Exploitation
Turning a limited write primitive in EDK II's Tcg2Smm module into SMM code execution — the flaw only lives before the end of the DXE phase, so it chains into pre-boot privilege escalation.
research · blog.quarkslab.com
PixieFail: Nine vulnerabilities in Tianocore's EDK II IPv6 network stack.
PixieFail: nine vulnerabilities in the IPv6 network stack of EDK II, TianoCore's open-source UEFI reference implementation, exploitable during network boot (PXE) on many enterprise machines.
research · swarm.ptsecurity.com
Slowburn: Looking through AMD Platform Configuration Blobs infrastructure
A deep dive into AMD Platform Configuration Blocks (APCB v1-v3) in motherboard SPI flash on an ASUS TUF Gaming A18, covering headers and structures via OpenSIL; started as a vulnerability write-up.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · lab.ctbb.show
Total.js RCE gadgets all around
RCEs, RCEs…they are all around and Total.js framework will be in our scope this time
research · lab.ctbb.show
Write Path Traversal to a RCE Art Department
# Write Path Traversal to a RCE Art Department ~/authors/fsi - profile fsi * * * Diyan Apostolov Nov 28, 2025 CriticalThinking Research members are treated as artists thus here is my small and...
Back