PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Breaking Secure Boot on the Silicon Labs Gecko platform

blog.quarkslab.com | research | #vulnerability | #embedded | #ota | #silicon-labs | #gecko | #secure-boot
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Vulnerability research on Silicon Labs' Gecko Bootloader: an OTA parser flaw in the open-source Gecko SDK that breaks Secure Boot and affects connected devices built on the platform.
Published
Collected

Related coverage

research · blog.quarkslab.com
A small bug in the signature verification of AOSP OTA packages
Quarkslab finds a small but critical bug in AOSP's OTA package signature verification — a bypass in RecoverySystem.verifyPackage, which checks the integrity of update ZIP archives.
research · blog.quarkslab.com
Bluetooth Low Energy GATT Fuzzing
Quarkslab presents a fuzzer for the Bluetooth Low Energy GATT/ATT layers, built around attack scenarios from an in-depth spec study; it uncovered bugs and vulnerabilities across several BLE stacks.
research · blog.quarkslab.com
Diving into Starlink's User Terminal Firmware
An overview of Starlink's User Terminal runtime internals — device firmware layout, internal communications with user applications, and tools released to support further research.
research · blog.quarkslab.com
Binbloom blooms: introducing v2
Introducing binbloom v2, Quarkslab's firmware reverse-engineering tool: a new method to determine the load base address of both 32- and 64-bit firmware binaries.
research · blog.quarkslab.com
Analysis of Qualcomm Secure Boot Chains
A six-month internship study of Qualcomm secure boot chains: dumping bootROM/SBL on Nexus 6P and Nokia 6, taking over the chain and hooking the secure monitor for EL3 read/write.
research · blog.quarkslab.com
Attacking the ARM's TrustZone
Second TrustZone post: a technical view of the attack surface — monitor message handlers, trustlets and Secure Boot — and what code execution at each privilege level enables.
Back