Subaru StarLink persistent root code execution.
Switch branches/tags
Nothing to show
Clone or download
Latest commit 399499e Nov 27, 2018
Type Name Latest commit message Commit time
Failed to load latest commit information.
doc final Nov 28, 2018
images final Nov 28, 2018
LICENSE final Nov 28, 2018 final Nov 28, 2018

Jailbreaking Subaru StarLink

Rooting the latest generation of Harman head units running on newer Subaru vehicles.

See doc/ for the write-up.


A vulnerability in the update mechanism of Subaru StarLink head units 2017, 2018, and 2019 may give an attacker (with physical access to the vehicle's USB ports) the ability to rewrite the firmware of the head unit. This vulnerability is due to bugs in the signature checking implementation used when verifying specific update files. An attacker could potentially install persistent malicious head unit firmware and execute arbitrary code as the root user.

Jailbroken head unit