2
edits
Changes
mLine 242:
Line 242: − + Line 474:
Line 474: − +
no edit summary
The fix for firmlaunch-hax was only applied to NATIVE_FIRM in [[9.5.0-22|9.5.0-X]], leaving SAFE_FIRM exploitable. With ARM11-kernel execution, one can trigger FIRM-launch in to SAFE_FIRM, do Kernel9 <=> Kernel11 sync, PXI sync and then repeat the original attack on SAFE_FIRM instead.
The fix for firmlaunch-hax was only applied to NATIVE_FIRM in [[9.5.0-22|9.5.0-X]], leaving SAFE_FIRM exploitable. With ARM11-kernel execution, one can trigger FIRM-launch in to SAFE_FIRM, do Kernel9 <=> Kernel11 sync, PXI sync and then repeat the original attack on SAFE_FIRM instead.
| ARM9 code execution
| ARM9 code execution
| [[11.3.0-36|11.3.0-X]]
| [[11.3.0-36|11.3.0-X]] (?)
|
|
| 2012-2013?
| 2012-2013?
| See description.
| See description.
| [[11.3.0-36|11.3.0-X]]
| [[11.3.0-36|11.3.0-X]]
| [[11.2.0-35|11.2.0-X]]
| [[11.3.0-36|11.3.0-X]]
| May 2016
| May 2016
| nedwill
| nedwill