Breaking the DA1469x BootROM - Vulnerability Analysis and Exploitation

A conference talk that explores a novel BootROM vulnerability in the Renesas DA1469x chip family, allowing secure boot bypass and encrypted firmware recovery. Discover the detailed process of analyzing and attacking the DA1469x bootrom's security features, following the journey from 0x0 to 0x24242424. Learn about the chip's security features including SecureBoot and encrypted firmware images, the challenges of reverse engineering dense bootrom code without symbols, and the identification of critical vulnerabilities (CVE-2024-25076 buffer overflow and CVE-2024-25077 crypto bug). Understand how these vulnerabilities impact platform security features and the development of exploits for fully secured devices. Gain valuable insights into embedded systems security assessment techniques presented by Chris Bellows, Research Science Director at Atredis Partners, who leads technical embedded assessments and complex reverse engineering projects.