MENU

Resources(82)

  • Samsung Hypervisor (RKP) arbitrary zero write

    Aris Thallas

    CENSUS identified a bug in RKP, the Samsung EL2 Hypervisor implementation. The bug allows to write the zero 64-bit value to an arbitrary memory address. For the bug to be triggered, code execution is required in the context of the EL1 kernel.

  • Emulating Hypervisors: a Samsung RKP case study (OffensiveCon 2020)

    Aris Thallas

    Hello, I'm Aris Thallas, a computer security researcher working at CENSUS. Back in February 2020 I had the pleasure of presenting my work on proprietary hypervisor emulation and bug discovery at the OffensiveCon 2020 conference.