Full Chain Baseband Exploits, Part 1

In our previous blog post, we have introduced our latest research into full chain baseband exploits. In this work, we have showcased new research tools we have developed (our nanoMIPS decompiler, debugger, and emulator for Mediatek basebands) and explored the interconnected components across the Cellular Processor and the Application Processor of Samsung and Mediatek radio interface stacks.
The most serious of such issues can lead to over-the-air exploitation of the device’s Android OS: zero-click remote code execution not only in …

application baseband blog blog post cellular components debugger decompiler emulator exploits latest mediatek processor research samsung tools work