The ZTE ZX297520V3 BootROM has a vulnerability that permits arbitrary memory writes via USB. This flaw arises from a lack of validation of the target address in USB download mode, enabling attackers to overwrite the stack and hijack execution flow. Exploiting this can bypass Secure Boot signature verification and allow unauthorized code execution.