CVE-2021-1931 is a buffer overflow in Qualcomm’s fastboot code, which is a pretty juicy and privileged target to have access to. (I don’t believe that the modern userspace ‘fastbootd’ will work here. It has to be the classic bootloader ‘fastboot’.) It affects a pretty wide range of relatively modern SoCs. It has been used practically to boot alternative operating systems on ’locked’ devices, such as Blackberry’s modern TCL OEMed phones, under the name of kibo, which also contains a practical example of what sorts of patches are needed to effectively unlock a bootloader.
>> Home