Hexagon fuzz: Full-system emulated fuzzing of Qualcomm basebands
Key takeaways 1. Due to Qualcomm’s proprietary architecture, a lack of security tooling exists around their baseband 2. Our tooling enables research on Hexagon baseband with significantly reduced engineering work 3. We release the first open-source toolchain for full-system emulated Hexagon firmware fuzzing at TROOPERS25 Overview Every phone has a cellular baseband processor to handle mobile communications (5G, 4G, GPS, and more). Qualcomm created a specific architecture for its baseband c