Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2018-6242 PoC — NVIDIA Tegra移动处理器BootROM Recovery Mode 缓冲区错误漏洞

Source
Associated Vulnerability
Title:NVIDIA Tegra移动处理器BootROM Recovery Mode 缓冲区错误漏洞 (CVE-2018-6242)
Description:Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode (RCM). An attacker with physical access to the device's USB and the ability to force the device to reboot into RCM could exploit the vulnerability to execute unverified code.
Description
Rust implementation of the Fusée Gelée exploit (CVE-2018-6242) for Tegra processors.
Readme
# fusee-gelee
*Rust implementation of the [Fusée Gelée](https://github.com/Qyriad/fusee-launcher) exploit (CVE-2018-6242) for Tegra processors.*

Currently supported platforms:
- Linux via `libusb`.

## Instructions
1. Obtain executable version of the exploit launcher.
2. Obtain a payload suitable for use on the target device.
3. Execute the launcher, providing a path to the payload:
```sh
./fusee-gelee /path/to/fusee-primary.bin
```

## Building from source
Create a debug build:
```sh
git clone https://github.com/austinhartzheim/fusee-gelee.git
cd fusee-gelee
cargo build  # binary output to target/debug/fusee-gelee
```

Create a release build:
```sh
cargo build --release
```

## Developing
Unit tests are available to compare the payload generation output against a sample payload generated by the Python implementation. To run the tests:
```sh
cargo test
```

## License
Licensed under the terms of GPL version 2. See `LICENSE.txt` for details.
File Snapshot

[4.0K] /data/pocs/f1fed4ddb059a84c9f69f3599d38a7510d037b3a ├── [ 206] Cargo.toml ├── [ 18K] LICENSE.txt ├── [ 957] README.md └── [4.0K] src ├── [4.0K] bin │   └── [1.6K] fusee-gelee.rs ├── [ 328] constants.rs ├── [4.0K] data │   ├── [ 92K] fusee-primary.bin │   ├── [ 124] intermezzo.bin │   ├── [108K] original-payload.bin │   └── [ 382] README.md ├── [6.0K] exploit.rs ├── [4.1K] lib.rs └── [3.1K] payload.rs 3 directories, 12 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →