Skip to main content
NewsPublished

Carrier locked RE: Note20 ABL Odin out-of-bounds read (DoS)

Source Reddit Cybersecurity

0

Discussion

A pre-authentication out-of-bounds write vulnerability exists in the bootloader Odin/LOKE decompressor of certain Snapdragon SM8250 Samsung Galaxy devices, including the Note20 (SM-N986U) US variant. This flaw allows an attacker to cause a recoverable denial of service (DoS) by corrupting UEFI memory, leading to device reboot out of Download Mode. The issue affects end-of-life US Snapdragon models and has been patched in supported devices such as the S20 FE and all S21 through S25 models. Exynos variants are not affected due to different bootloaders.

r/cybersecurity (opens in a new tab)u/Greenlinkx0 points0 comments

Trying to figure out a way to get root access to a US Note 20 ultra 5g. I made some progress but hit a wall. https://github.com/UnsignedChad/galaxy-note20-abl-odin-re

References

Community reviews

Loading reviews…