Found an interesting logic bug while digging on #Qualcomm BootROM, which can be exploited to write arbitrary file from guest to host using the Sahara protocol.
00:00
- @sundamao try `id` $(whoami)
- Notes on the UK IoT cybersec "Code of Practice" blog.erratasec.com/2018/10/notes-…
