EL3 Tour: Get the Ultimate Privilege of Android Phone

Starting from non-secure EL1, this research will take a deep dive into the EL3 implementation of Huawei P20.

The exploit code is used to disarm the Face ID of the cellphone.

Published in 2019 via Infiltrate and MOSEC.