CVE-2026-50719: n/a

CVE-2026-50719 describes a vulnerability in Ingenic SoC boot ROMs (T41 confirmed, T32, T40, and A1 likely affected) where the boot ROM executes an attacker-controlled init table from the SPL header before checking secure boot state or signature verification. The init table parser supports full 32-bit writes to SRAM, allowing modification of secure boot state prior to verification. An attacker with physical write access to boot media can inject an init-table entry that disables secure boot checks, causing the ROM to accept unsigned or tampered first-stage boot code. This undermines the secure boot mechanism, allowing potential unauthorized code execution early in the boot process. The vulnerability has been hardware-validated on a secureboot-enabled T41 device and ROM analysis confirms similar behavior on other SoCs.

An attacker with physical write access to the boot media can bypass secure boot protections by injecting malicious init-table entries that disable secure boot checks. This allows execution of unsigned or modified first-stage boot code, compromising the device's trusted boot process. The vulnerability impacts the integrity and authenticity guarantees provided by secure boot, potentially enabling persistent low-level compromise.

No official patch or remediation is currently documented. Since the vulnerability requires physical write access to boot media, mitigation may involve physical security controls to prevent unauthorized access. Monitor vendor advisories for any future firmware or hardware mitigations. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.