Threats tagged 'ghsa-46j4-pvjg-4r6r'

The Ingenic T41 SoC boot ROM, and likely the T32, T40, and A1 variants, contain a vulnerability in their boot process. The boot ROM parses and executes an attacker-controlled init table from the SPL header before verifying secure boot state or signature. This init table parser allows 32-bit writes to SRAM, enabling an attacker with physical write access to boot media to disable secure boot checks. This leads to acceptance of unsigned or modified first-stage boot code, bypassing secure boot protections. The issue has been hardware-validated on the T41 and confirmed by ROM analysis on related SoCs.