https://raelize.com/tags/mt8696/ Recent content in MT8696 on Raelize - Embedded Device Security Testing, Consultancy & Training Hugo en-us Sun, 17 May 2026 23:00:00 +0200 https://raelize.com/blog/setresuid-glitching-google-tv-streamer-from-adb-to-root/ Sun, 17 May 2026 23:00:00 +0200 https://raelize.com/blog/setresuid-glitching-google-tv-streamer-from-adb-to-root/ We attacked Google’s TV Streamer 4K with an ElectroMagnetic Fault Injection (EMFI) glitch on the Mediatek MT8696’s CPU. From an unprivileged adb shell, a single EM glitch during setresuid syscall makes the Linux kernel commit credentials with uid = 0. This is our hardwear.io NL 2025 talk in long form.