ATTACKING THE SAMSUNG GALAXY A* BOOT CHAIN

Summary from the TLDR Web Dev newsletter

Quarkslab researchers discovered four vulnerabilities in the boot chain of Samsung Galaxy A devices, enabling them to execute code in the bootloader, gain root access with persistence, and leak data from the Secure World, including Android Keystore keys. These vulnerabilities affect two crucial components: Little Kernel, the third bootloader, and Secure Monitor, the highest privileged software. The researchers presented their findings at BlackHat USA 2024 and released proof-of-concepts for the vulnerabilities on GitHub.