Get the latest tech news

Hexagon fuzz: Full-system emulated fuzzing of Qualcomm basebands

Bruno Produit, Luca Glockow, Rachna Shriwas

The baseband security research community has made considerable progress in recent years, yet a critical gap has persisted regarding Qualcomm’s Hexagon architecture. We created a fuzzer that handles control flow manipulation for a specific iPhone firmware, up to user mode, utilizing these LibAFL bindings. Snippet of the JSON-based configuration for Hexagon fuzzWith this tooling, a fully coverage-guided fuzzer can run on any Hexagon-based baseband firmware.

Get the Android app