3DS System Flaws: Difference between revisions
m more info |
→Process9: Changed reference to firmlaunch-hax to be more searchable in the section about safefirmhax. |
||
| Line 207: | Line 207: | ||
| SAFE_MODE_FIRM is almost never updated(even when NATIVE_FIRM is updated for vuln fixes), this can be noticed by ''just'' checking 3dbrew/ninupdates title-listings. | | SAFE_MODE_FIRM is almost never updated(even when NATIVE_FIRM is updated for vuln fixes), this can be noticed by ''just'' checking 3dbrew/ninupdates title-listings. | ||
The fix for | The fix for firmlaunch-hax was only applied to NATIVE_FIRM in [[9.5.0-22|9.5.0-X]], leaving SAFE_FIRM exploitable. With ARM11-kernel execution, one can trigger FIRM-launch in to SAFE_FIRM, do Kernel9 <=> Kernel11 sync, PXI sync and then repeat the original attack on SAFE_FIRM instead. | ||
| ARM9 code execution | | ARM9 code execution | ||
| None | | None | ||