Rockchip RK3588s Secure BootROM arbitrary code execution with highest privileges (cve.org)

1 points by yeko 2d ago ↗ HN

1 comment

[ 0.18 ms ] story [ 3.7 ms ] thread

An attacker with physical access to a device containing RK3588s SoC can easily modify the next-stage loader data on-the-fly using a low-cost SD-card or SPI NOR/NAND or EMMC emulator.

So yeah, not a huge surprise you can pwn a device you can solder stuff to.