MAR 02 · 2026·1 min read
Glitching the boot ROM of a $14 BLE thermostat — RTL8762D
Voltage-glitching the Realtek RTL8762D out of secure-boot using a single MOSFET and a 5 ns pulse. Cost of equipment: under €60. Drops a UART shell with secure-boot fully bypassed.
Critical 9.1PATCHED
Full writeup coming soon.