I am new on these forums. I have an UEH32EH5000 with T-MST9DEUC-1022.0 and have been reading around (mostly SamyGO forums and wiki) to see whether it's possible to achieve root access.
Related forum threads (some are old):
- https://forum.samygo.tv/viewtopic.php?t=7009
- https://forum.samygo.tv/viewtopic.php?t=5000
- https://forum.samygo.tv/viewtopic.php?t=5052
- https://forum.samygo.tv/viewtopic.php?t=2165 (describes an approach viable when TDM allows memory write)
- write to a hex memory address (can't find physical memory write, only register write) to patch in-memory kernel
- re-encrypt a firmware update with patched kernel (need AES key for this) and install it via USB
- exploit a SIGSEGV from the TDM (there are many, but hard to impossible to use as a vector)
- exploit some buffer overflow with specially crafted media to play from USB (might not be a good vector if memory protections are in place)