H(ack)DMI: Pwning HDMI For Fun And Profit
summary
Explains HDMI attack surface by mapping TMDS, CEC, DDC and ARC to concrete exploit primitives, describes a custom fuzzer made by authors that exercises EDID/DDC and CEC handlers, and reports three vulnerabilities discovered in Xiaomi Mi Box 3 including a DDC/EDID parsing bug that enables remote code execution over a direct HDMI link; shows the exact packet injections, fuzzing corpus, hardware setup and working exploit demonstration.
AI-written summary · about
chapters (8)
- 0:00Introduction to HDMI hacking
- 3:33HDMI protocol and vulnerabilities
- 10:21Exploiting EDID data
- 17:32I2C bus and device control
- 23:08Practical attacks on HDMI devices
- 30:56Debugging and reverse engineering
- 36:11Real-world attack scenarios
- 40:41Q&A and summary
related talks
52mIoT Hacking 101: Reverse Engineering The Xiaomi Ecosystem
34mWho Monitors The Monitors? Hacking The Monitor Control Command Set
51mExploiting Hardware Glitches And Side Channels In Perfect Software
25mBiometric Authentication Under Threat: Liveness Detection Hacking
27mThe Most Dangerous Codec in the World: Finding and Exploiting Vulnerabilities in H.264 Decoders
37mFault Injection And The Supply Chain
51mSteering Clear of Danger: Decrypting the Realities of Remote Car Hacking
34mCore Escalation: Unleashing the Power of Cross-Core Attacks on Heterogeneous System