Skip to content
OpenAdvisories

Vendor

Rockchip

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.6

    Rockchip RK3588s Secure BootROM TOCTOU (time-of-check to time-of-use) vulnerability leading to arbitrary code execution with highest privileges

    Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external media (SPI NOR or NAND, EMMC or SD). The code reads the header of the next-stage loader twice. The header contains hashes of the executable m…