Vulnerability-Lookup

CVE-2024-13942 (GCVE-0-2024-13942)

Vulnerability from cvelistv5 – Published: 2026-08-19 16:40 – Updated: 2026-08-19 19:10

Title

Rockchip RK3588s Secure BootROM TOCTOU (time-of-check to time-of-use) vulnerability leading to arbitrary code execution with highest privileges

Summary

Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external media (SPI NOR or NAND, EMMC or SD). The code reads the header of the next-stage loader twice. The header contains hashes of the executable modules and is signed with a private key, the public part of which is verified against the SHA256 digest blown in the OTP. The first read is only partial and contains only the hashes of the executable modules. The second is complete, including the header signature. Although the header is verified based on the fully read data, the authenticity of the executable modules is checked against the partial data from the first read. An attacker with physical access to a device containing RK3588s SoC can easily modify the next-stage loader data on-the-fly using a low-cost SD-card or SPI NOR/NAND or EMMC emulator. Even a simple ultra low-cost circuit comprising two memory chips (containing the same data but different headers - the original and the modified one) and a multiplexer can be used to carry out an attack. This can lead to arbitrary code execution with the highest privileges available (EL3). This issue affects RK3588s: RK3588s SoC BootROM (secure) 350B20210512V100 and possibly others. As remediation apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable https://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html

Severity

7.6 (High)


                        
                          CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-19 19:08 UTC

CWE

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Assigner

Kaspersky mitre root

References

3 references

URL	Tags
https://github.com/klsecservices/Advisories/blob/…
https://www.rock-chips.com/a/en/products/RK35_Ser…
https://www.rock-chips.com/a/en/psirt/vdp.html

Impacted products

1 product

Vendor	Product	Version	CPE status
Rockchip	RK3588s	Affected: 350B20210512V100	guessed

Credits

The vulnerability was discovered by experts from Kaspersky (https://kaspersky.com)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-13942",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-19T19:08:57.606738Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-19T19:10:15.374Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "modules": [
            "Secure BootROM"
          ],
          "product": "RK3588s",
          "vendor": "Rockchip",
          "versions": [
            {
              "status": "affected",
              "version": "350B20210512V100"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "The vulnerability was discovered by experts from Kaspersky (https://kaspersky.com)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSecure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external media (SPI NOR or NAND, EMMC or SD).\u003c/p\u003e\n\u003cp\u003eThe code reads the header of the next-stage loader twice. The header contains hashes of the executable modules and is signed with a private key, the public part of which is verified against the SHA256 digest blown in the OTP.\u003c/p\u003e\n\u003cp\u003eThe first read is only partial and contains only the hashes of the executable modules. The second is complete, including the header signature.\u003cbr\u003e\nAlthough the header is verified based on the fully read data, the authenticity of the executable modules is checked against the partial data from the first read.\u003c/p\u003e\n\u003cp\u003eAn attacker with physical access to a device containing RK3588s SoC can easily modify the next-stage loader data on-the-fly using a low-cost SD-card or SPI NOR/NAND or EMMC emulator. Even a simple ultra low-cost circuit comprising two memory chips (containing the same data but different headers - the original and the modified one) and a multiplexer can be used to carry out an attack.\u003c/p\u003e\n\u003cp\u003eThis can lead to arbitrary code execution with the highest privileges available (EL3). This issue affects RK3588s: RK3588s SoC BootROM (secure) 350B20210512V100 and possibly others.\u003cbr\u003eAs remediation a\u003cspan\u003epply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable \u003c/span\u003e\u003ca href=\"https://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html\" target=\"_blank\" rel=\"noopener nofollow\"\u003ehttps://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html\u003c/a\u003e\u003c/p\u003e"
            }
          ],
          "value": "Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external media (SPI NOR or NAND, EMMC or SD).\n\n\n\n\nThe code reads the header of the next-stage loader twice. The header contains hashes of the executable modules and is signed with a private key, the public part of which is verified against the SHA256 digest blown in the OTP.\n\n\n\n\nThe first read is only partial and contains only the hashes of the executable modules. The second is complete, including the header signature.\n\nAlthough the header is verified based on the fully read data, the authenticity of the executable modules is checked against the partial data from the first read.\n\n\n\n\nAn attacker with physical access to a device containing RK3588s SoC can easily modify the next-stage loader data on-the-fly using a low-cost SD-card or SPI NOR/NAND or EMMC emulator. Even a simple ultra low-cost circuit comprising two memory chips (containing the same data but different headers - the original and the modified one) and a multiplexer can be used to carry out an attack.\n\n\n\n\nThis can lead to arbitrary code execution with the highest privileges available (EL3). This issue affects RK3588s: RK3588s SoC BootROM (secure) 350B20210512V100 and possibly others.\nAs remediation apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable  https://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-682",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-682: Exploitation of Firmware or ROM Code with Unpatchable Vulnerabilities"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-367",
              "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-19T17:19:48.684Z",
        "orgId": "e45d732a-8f6b-4b6b-be76-7420f6a2b988",
        "shortName": "Kaspersky"
      },
      "references": [
        {
          "url": "https://github.com/klsecservices/Advisories/blob/master/KLSA-00230-Rockchip-RK3588s-Secure-BootROM-TOCTOU-vulnerability.md"
        },
        {
          "url": "https://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html"
        },
        {
          "url": "https://www.rock-chips.com/a/en/psirt/vdp.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Rockchip RK3588s Secure BootROM TOCTOU (time-of-check to time-of-use) vulnerability leading to arbitrary code execution with highest privileges",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e45d732a-8f6b-4b6b-be76-7420f6a2b988",
    "assignerShortName": "Kaspersky",
    "cveId": "CVE-2024-13942",
    "datePublished": "2026-08-19T16:40:18.082Z",
    "dateReserved": "2025-04-02T16:35:45.784Z",
    "dateUpdated": "2026-08-19T19:10:15.374Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-13942",
      "date": "2026-08-25",
      "epss": "0.00163",
      "percentile": "0.05678"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-13942\",\"sourceIdentifier\":\"vulnerability@kaspersky.com\",\"published\":\"2026-08-19T17:18:21.440\",\"lastModified\":\"2026-08-19T20:17:00.200\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external media (SPI NOR or NAND, EMMC or SD).\\n\\n\\n\\n\\nThe code reads the header of the next-stage loader twice. The header contains hashes of the executable modules and is signed with a private key, the public part of which is verified against the SHA256 digest blown in the OTP.\\n\\n\\n\\n\\nThe first read is only partial and contains only the hashes of the executable modules. The second is complete, including the header signature.\\n\\nAlthough the header is verified based on the fully read data, the authenticity of the executable modules is checked against the partial data from the first read.\\n\\n\\n\\n\\nAn attacker with physical access to a device containing RK3588s SoC can easily modify the next-stage loader data on-the-fly using a low-cost SD-card or SPI NOR/NAND or EMMC emulator. Even a simple ultra low-cost circuit comprising two memory chips (containing the same data but different headers - the original and the modified one) and a multiplexer can be used to carry out an attack.\\n\\n\\n\\n\\nThis can lead to arbitrary code execution with the highest privileges available (EL3). This issue affects RK3588s: RK3588s SoC BootROM (secure) 350B20210512V100 and possibly others.\\nAs remediation apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable  https://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html\"}],\"affected\":[{\"source\":\"vulnerability@kaspersky.com\",\"affectedData\":[{\"vendor\":\"Rockchip\",\"product\":\"RK3588s\",\"defaultStatus\":\"unknown\",\"modules\":[\"Secure BootROM\"],\"versions\":[{\"version\":\"350B20210512V100\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"vulnerability@kaspersky.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":7.6,\"baseSeverity\":\"HIGH\",\"attackVector\":\"PHYSICAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":0.9,\"impactScore\":6.0}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-08-19T19:08:57.606738Z\",\"id\":\"CVE-2024-13942\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"vulnerability@kaspersky.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-367\"}]}],\"references\":[{\"url\":\"https://github.com/klsecservices/Advisories/blob/master/KLSA-00230-Rockchip-RK3588s-Secure-BootROM-TOCTOU-vulnerability.md\",\"source\":\"vulnerability@kaspersky.com\"},{\"url\":\"https://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html\",\"source\":\"vulnerability@kaspersky.com\"},{\"url\":\"https://www.rock-chips.com/a/en/psirt/vdp.html\",\"source\":\"vulnerability@kaspersky.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-13942\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-19T19:08:57.606738Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-08-19T19:09:36.644Z\"}}], \"cna\": {\"title\": \"Rockchip RK3588s Secure BootROM TOCTOU (time-of-check to time-of-use) vulnerability leading to arbitrary code execution with highest privileges\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"The vulnerability was discovered by experts from Kaspersky (https://kaspersky.com)\"}], \"impacts\": [{\"capecId\": \"CAPEC-682\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-682: Exploitation of Firmware or ROM Code with Unpatchable Vulnerabilities\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 7.6, \"attackVector\": \"PHYSICAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Rockchip\", \"modules\": [\"Secure BootROM\"], \"product\": \"RK3588s\", \"versions\": [{\"status\": \"affected\", \"version\": \"350B20210512V100\"}], \"defaultStatus\": \"unknown\"}], \"references\": [{\"url\": \"https://github.com/klsecservices/Advisories/blob/master/KLSA-00230-Rockchip-RK3588s-Secure-BootROM-TOCTOU-vulnerability.md\"}, {\"url\": \"https://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html\"}, {\"url\": \"https://www.rock-chips.com/a/en/psirt/vdp.html\"}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.2\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external media (SPI NOR or NAND, EMMC or SD).\\n\\n\\n\\n\\nThe code reads the header of the next-stage loader twice. The header contains hashes of the executable modules and is signed with a private key, the public part of which is verified against the SHA256 digest blown in the OTP.\\n\\n\\n\\n\\nThe first read is only partial and contains only the hashes of the executable modules. The second is complete, including the header signature.\\n\\nAlthough the header is verified based on the fully read data, the authenticity of the executable modules is checked against the partial data from the first read.\\n\\n\\n\\n\\nAn attacker with physical access to a device containing RK3588s SoC can easily modify the next-stage loader data on-the-fly using a low-cost SD-card or SPI NOR/NAND or EMMC emulator. Even a simple ultra low-cost circuit comprising two memory chips (containing the same data but different headers - the original and the modified one) and a multiplexer can be used to carry out an attack.\\n\\n\\n\\n\\nThis can lead to arbitrary code execution with the highest privileges available (EL3). This issue affects RK3588s: RK3588s SoC BootROM (secure) 350B20210512V100 and possibly others.\\nAs remediation apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable  https://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eSecure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external media (SPI NOR or NAND, EMMC or SD).\u003c/p\u003e\\n\u003cp\u003eThe code reads the header of the next-stage loader twice. The header contains hashes of the executable modules and is signed with a private key, the public part of which is verified against the SHA256 digest blown in the OTP.\u003c/p\u003e\\n\u003cp\u003eThe first read is only partial and contains only the hashes of the executable modules. The second is complete, including the header signature.\u003cbr\u003e\\nAlthough the header is verified based on the fully read data, the authenticity of the executable modules is checked against the partial data from the first read.\u003c/p\u003e\\n\u003cp\u003eAn attacker with physical access to a device containing RK3588s SoC can easily modify the next-stage loader data on-the-fly using a low-cost SD-card or SPI NOR/NAND or EMMC emulator. Even a simple ultra low-cost circuit comprising two memory chips (containing the same data but different headers - the original and the modified one) and a multiplexer can be used to carry out an attack.\u003c/p\u003e\\n\u003cp\u003eThis can lead to arbitrary code execution with the highest privileges available (EL3). This issue affects RK3588s: RK3588s SoC BootROM (secure) 350B20210512V100 and possibly others.\u003cbr\u003eAs remediation a\u003cspan\u003epply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable \u003c/span\u003e\u003ca href=\\\"https://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html\\\" target=\\\"_blank\\\" rel=\\\"noopener nofollow\\\"\u003ehttps://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html\u003c/a\u003e\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-367\", \"description\": \"CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition\"}]}], \"providerMetadata\": {\"orgId\": \"e45d732a-8f6b-4b6b-be76-7420f6a2b988\", \"shortName\": \"Kaspersky\", \"dateUpdated\": \"2026-08-19T17:19:48.684Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-13942\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-19T19:10:15.374Z\", \"dateReserved\": \"2025-04-02T16:35:45.784Z\", \"assignerOrgId\": \"e45d732a-8f6b-4b6b-be76-7420f6a2b988\", \"datePublished\": \"2026-08-19T16:40:18.082Z\", \"assignerShortName\": \"Kaspersky\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2024-13942

Vulnerability from fkie_nvd - Published: 2026-08-19 17:18 - Updated: 2026-08-19 20:17

Severity

7.6 (High) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Summary

References

	URL	Tags
	vulnerability@kaspersky.com	https://github.com/klsecservices/Advisories/blob/master/KLSA-00230-Rockchip-RK3588s-Secure-BootROM-TOCTOU-vulnerability.md
	vulnerability@kaspersky.com	https://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html
	vulnerability@kaspersky.com	https://www.rock-chips.com/a/en/psirt/vdp.html

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unknown",
          "modules": [
            "Secure BootROM"
          ],
          "product": "RK3588s",
          "vendor": "Rockchip",
          "versions": [
            {
              "status": "affected",
              "version": "350B20210512V100"
            }
          ]
        }
      ],
      "source": "vulnerability@kaspersky.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external media (SPI NOR or NAND, EMMC or SD).\n\n\n\n\nThe code reads the header of the next-stage loader twice. The header contains hashes of the executable modules and is signed with a private key, the public part of which is verified against the SHA256 digest blown in the OTP.\n\n\n\n\nThe first read is only partial and contains only the hashes of the executable modules. The second is complete, including the header signature.\n\nAlthough the header is verified based on the fully read data, the authenticity of the executable modules is checked against the partial data from the first read.\n\n\n\n\nAn attacker with physical access to a device containing RK3588s SoC can easily modify the next-stage loader data on-the-fly using a low-cost SD-card or SPI NOR/NAND or EMMC emulator. Even a simple ultra low-cost circuit comprising two memory chips (containing the same data but different headers - the original and the modified one) and a multiplexer can be used to carry out an attack.\n\n\n\n\nThis can lead to arbitrary code execution with the highest privileges available (EL3). This issue affects RK3588s: RK3588s SoC BootROM (secure) 350B20210512V100 and possibly others.\nAs remediation apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable  https://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html"
    }
  ],
  "id": "CVE-2024-13942",
  "lastModified": "2026-08-19T20:17:00.200",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "PHYSICAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.6,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.9,
        "impactScore": 6.0,
        "source": "vulnerability@kaspersky.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-13942",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-08-19T19:08:57.606738Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-08-19T17:18:21.440",
  "references": [
    {
      "source": "vulnerability@kaspersky.com",
      "url": "https://github.com/klsecservices/Advisories/blob/master/KLSA-00230-Rockchip-RK3588s-Secure-BootROM-TOCTOU-vulnerability.md"
    },
    {
      "source": "vulnerability@kaspersky.com",
      "url": "https://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html"
    },
    {
      "source": "vulnerability@kaspersky.com",
      "url": "https://www.rock-chips.com/a/en/psirt/vdp.html"
    }
  ],
  "sourceIdentifier": "vulnerability@kaspersky.com",
  "vulnStatus": "Received",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-367"
        }
      ],
      "source": "vulnerability@kaspersky.com",
      "type": "Secondary"
    }
  ]
}

GHSA-XPXW-FF9M-VH66

Vulnerability from github – Published: 2026-08-19 18:32 – Updated: 2026-08-19 18:32

Details

Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external media (SPI NOR or NAND, EMMC or SD).

The code reads the header of the next-stage loader twice. The header contains hashes of the executable modules and is signed with a private key, the public part of which is verified against the SHA256 digest blown in the OTP.

The first read is only partial and contains only the hashes of the executable modules. The second is complete, including the header signature.

Although the header is verified based on the fully read data, the authenticity of the executable modules is checked against the partial data from the first read.

An attacker with physical access to a device containing RK3588s SoC can easily modify the next-stage loader data on-the-fly using a low-cost SD-card or SPI NOR/NAND or EMMC emulator. Even a simple ultra low-cost circuit comprising two memory chips (containing the same data but different headers - the original and the modified one) and a multiplexer can be used to carry out an attack.

This can lead to arbitrary code execution with the highest privileges available (EL3). This issue affects RK3588s: RK3588s SoC BootROM (secure) 350B20210512V100 and possibly others. As remediation apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable https://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html

Severity

7.6 (High)


                  
                    CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-13942"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-367"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-08-19T17:18:21Z",
    "severity": "HIGH"
  },
  "details": "Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external media (SPI NOR or NAND, EMMC or SD).\n\n\n\n\nThe code reads the header of the next-stage loader twice. The header contains hashes of the executable modules and is signed with a private key, the public part of which is verified against the SHA256 digest blown in the OTP.\n\n\n\n\nThe first read is only partial and contains only the hashes of the executable modules. The second is complete, including the header signature.\n\nAlthough the header is verified based on the fully read data, the authenticity of the executable modules is checked against the partial data from the first read.\n\n\n\n\nAn attacker with physical access to a device containing RK3588s SoC can easily modify the next-stage loader data on-the-fly using a low-cost SD-card or SPI NOR/NAND or EMMC emulator. Even a simple ultra low-cost circuit comprising two memory chips (containing the same data but different headers - the original and the modified one) and a multiplexer can be used to carry out an attack.\n\n\n\n\nThis can lead to arbitrary code execution with the highest privileges available (EL3). This issue affects RK3588s: RK3588s SoC BootROM (secure) 350B20210512V100 and possibly others.\nAs remediation apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable  https://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html",
  "id": "GHSA-xpxw-ff9m-vh66",
  "modified": "2026-08-19T18:32:47Z",
  "published": "2026-08-19T18:32:47Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13942"
    },
    {
      "type": "WEB",
      "url": "https://github.com/klsecservices/Advisories/blob/master/KLSA-00230-Rockchip-RK3588s-Secure-BootROM-TOCTOU-vulnerability.md"
    },
    {
      "type": "WEB",
      "url": "https://www.rock-chips.com/a/en/products/RK35_Series/2022/0926/1660.html"
    },
    {
      "type": "WEB",
      "url": "https://www.rock-chips.com/a/en/psirt/vdp.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2024-13942 (GCVE-0-2024-13942)

FKIE_CVE-2024-13942

GHSA-XPXW-FF9M-VH66

Tags

Sightings

Nomenclature