Researcher achieves arbitrary code execution on Meta Ray-Ban smartglasses via OTA firmware extraction
evilsocket · x · 2026-11-07
Security researcher pamoutaf published a detailed writeup on achieving arbitrary code execution on Meta Ray-Ban smartglasses.
- While prepping for Pwn2Own 2026, they practiced on last year's targets and unexpectedly got code execution on the glasses, which were no longer in the wearables category
- No teardown or probes: they reversed the Meta AI app with JADX, found the OTA update flow (OtaArtifactFetcher / OTAArtifactInfo), and hooked OTAArtifactInfo to print the CDN URL of the firmware update package, enabling offline firmware extraction
- The bug was reported to Meta; after some back-and-forth over the payout, a bounty was agreed
- Friends warned the devices were heavily hardened and unattempted at last year's Pwn2Own; the researcher went ahead anyway and succeeded
More from Embodied
- CoRL Attendees Urged to Download Tesla's Robotaxi App to Try Cybercab in Austin — micoolcho · 2026-11-07
- A decade after Google's self-driving car demo, writer tries Tesla Robotaxi in Austin — micoolcho · 2026-11-07
- Claude paints a watercolor tree with a robotic arm: 303 brush strokes, 4.5 hours, mixes its own colors — Successful-Earth678 · 2026-11-07
- Figure CEO Brett Adcock: 'One day the entire world will look like this' — adcock_brett · 2026-11-07
- MACHINA Summit co-founder on Europe's Physical AI bottlenecks and VC gap — MarwaEldiwiny · 2026-11-07
- Wayve brings Wayve Labs to CoRL, booth 106, beyond-driving roadmap — Jamie_Shotton · 2026-11-07