Bypassing the Maginot Line: Remotely Exploit the Hardware Decoder on Smartphone
summary
Covers the Qualcomm Venus hardware video decoder on smartphones, detailing its architecture, operational principles, and attack surface. Explains techniques to bypass secure boot, set up a live debugger for Venus, and describes specific vulnerabilities found plus methods to exploit the decoder remotely.
AI-written summary · about
chapters (15)
- 0:00black hat Bypassing the Maginot Line
- 1:04About Tencent Blade Team
- 1:43Motivations
- 2:45Android Media Architecture
- 3:39Stagefright Summary
- 4:19Stagefright Vulnerabilities
- 4:54Hardening Media-Stack
- 5:35Hardware Decoder The Forgotten Continent
- 6:37Hardware Decoder Overview
- 7:19Overall Roadmap - RCE into Venus
- 7:52Remote Attack Vector
- 8:29Venus Overview
- 9:15Qualcomm Venus
- 11:04Firmware & Memory Layout
- 12:09Firmware Module
related talks
37mVlind Glitch: Blind VCC Glitching Technique to Bypass the Secure Boot of Qualcomm MSM8916 Mobile SoC
36mOut Of The Box Exploitation Breaking The Trust Chain Of The Ethereum Phone
13mBeyond the Hype: Guanxing on Exploiting Crypto Phones and the Evolution of Security Research
01h 46mTutorial: Introduction to Reverse Engineering
51mExploiting Hardware Glitches And Side Channels In Perfect Software
25mBootStomp: On the Security of Bootloaders in Mobile Devices
40mOver the Air, Under the Radar: Attacking and Securing the Pixel Modem
51mSteering Clear of Danger: Decrypting the Realities of Remote Car Hacking