CVE-2026-50719
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
以下是对该漏洞描述信息的中文翻译： Ingenic T41 芯片，以及可能包括 T32、T40 和 A1 的 SoC，其引导加载程序 ROM（boot ROM）在检查安全启动状态之前，会先解析并执行由 SPL 头中的攻击者控制的初始化表（init table）。该初始化表解析器支持完整的 32 位地址写入操作，从而允许在安全启动状态验证决定之前修改驻留在 SRAM 中的安全启动状态。拥有对引导介质物理写入权限的攻击者可以注入一个禁用安全启动检查的初始化表条目，导致 ROM 接受未签名或已被篡改的第一阶段引导代码。此
Possible ATT&CK Techniques 2 AI
T1608 · Stage Capabilities T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-50719
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and before invoking signature verification. The init table parser supports full-address 32-bit write operations, allowing modification of SRAM-resident secure boot state prior to the verification decision. An attacker with physical write access to boot media can inject an init-table entry that disables the secure boot check, causing the ROM to accept unsigned or modified first-stage boot code. This has been hardware-validated on a secureboot-enabled T41 device; ROM analysis confirms closely related behavior on T32, T40, and A1.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2026-50719
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-50719
请登录查看更多情报信息。
News Coverage for CVE-2026-50719 (1)
Same Patch Batch · n/a · 2026-08-19 · 7 CVEs total
| CVE-2022-4996 | 5.3 MEDIUM | mruby bigint.c udiv floating point comparison with incorrect operator |
| CVE-2026-76014 | 3.3 LOW | BusyBox FEATURE_WGET_TIMEOUT wget.c null pointer dereference |
| CVE-2026-51367 | Bottinelli Informatica Vedo Suite 安全漏洞 | |
| CVE-2026-51366 | Bottinelli Informatica Vedo Suite 安全漏洞 | |
| CVE-2026-50720 | 英伟达T31 Secure Boot绕过漏洞 | |
| CVE-2026-71694 | BOOM v1.2远程代码执行漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-50719
No comments yet