Fenrir PoC Breaks Secure Boot on Nothing Phone (2a) and CMF Phone 1

A new proof-of-concept exploit named “fenrir” targets MediaTek-powered devices like the Nothing Phone (2a), allowing attackers to execute arbitrary code by compromising the secure boot process. This vulnerability puts devices at risk of firmware manipulation, unauthorized OS installation, and trust chain breaches. #NothingPhone2a #MediaTekVulnerability

Keypoints

The “fenrir” PoC exploits a logic flaw in the secure boot verification process of MediaTek devices with unlocked bootloaders.
The vulnerability allows patching bootloader components to bypass verification checks, enabling arbitrary code execution.
The exploit has been tested on the Nothing Phone (2a) and is believed to affect other MediaTek devices like the Vivo X80 Pro.
Successful exploitation can lead to installing unauthorized operating systems and firmware manipulation.
Users are advised to avoid unlocking bootloaders, and device manufacturers should enforce verification of the bl2_ext component.