Samsung Bootloader Protection Mechanism Failure Vulnerability Allowing Fastboot Command Execution

A protection mechanism failure vulnerability has been identified in the bootloader of select Android 13 and 14 devices using MediaTek chipsets, prior to the January 2025 Security Maintenance Release. This vulnerability allows physical attackers to execute fastboot commands, requiring user interaction to trigger.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of fastboot commands, potentially allowing physical attackers to manipulate the device at a low level.

Remediation

The vulnerability can be addressed by updating to the January 2025 Security Maintenance Release.