MAR 02 · 2026·1 min read

Glitching the boot ROM of a $14 BLE thermostat — RTL8762D

Voltage-glitching the Realtek RTL8762D out of secure-boot using a single MOSFET and a 5 ns pulse. Cost of equipment: under €60. Drops a UART shell with secure-boot fully bypassed.

Critical 9.1PATCHED

Full writeup coming soon.