ASN.1 (Abstract Syntax Notation One) is a standard language used for describing data structures and encoding data in a way that can be transferred between different systems. Data Structures, Encoding and Parsing are keywords that usually indicate an interesting attack surface in any target. In this talk, we will take a look at the Intel Infineon Baseband's ASN.1 parser which is a key component of a number mobile devices and embedded systems. It has been used in various iPhone models in the past, as well as Tesla cars. We will take a deep dive into the work done in identifying, debugging and exploiting a vulnerability found in this code.
Principal Security Research at Vigilant Labs.
