This is a PoC exploit for a vulnerability in the Nothing Phone 2a / CMF Phone 1 secure boot chain (and possibly other MediaTek devices).
It abuses a logic flaw where one component isn’t properly verified if the seccfg unlock state is set to unlocked.
The exploit achieves code execution at EL3 and breaks the secure boot chain after Preloader execution.
Source: https://github.com/R0rt1z2/fenrir
