Nvidia graphics card BIOS digital signature verification is cracked, the new tool can be brushed into any firmware

Thanks to CTOnews.com netizen Navi21 for the clue delivery! CTOnews.com, August 21 (Xinhua)-- developers have successfully unearthed a vulnerability that can bypass Nvidia's GPU "match recognition", allowing users to attempt firmware updates to any N card.

For example, you can flush the BIOS of the RTX 3060 into the RTX 4090 (not recommended), or the 1.1 V BIOS with a stronger performance release into the RTX 4090 (the existing model is limited to 1070mV), or the same factory OC graphics card BIOS into a cheaper ordinary graphics card (provided that the heat dissipation keeps up), or reverse operation to reduce fan noise.

CTOnews.com query found that after 2013, Nvidia introduced a unique BIOS verification method for its GPU based on its Falcon security chip (GTX 900Series Maxwell and subsequent products), including restrictions on BIOS signature locks and vendor / device checks, thus avoiding the use of unauthorized firmware in its GPU.

Today, OMGVflash, developed by nvflashk and Veii developed by Kefi, provides a way to bypass these restrictions, allowing users to brush in arbitrary firmware without passing server checks and minimum version requirements.

With OMGflash, you can also downgrade InfoROM and XUSB FW firmware to remove software EEPROM locks (mainly between different EEPROM such as ISSI or if there is dGPU on laptops).

It is reported that as long as the 32bit and 8bit checksums on the usermod are correct, you can brush into any BIOS and bypass the FE / VendorCert / XOC Cert / MasterCert golden card system. You can basically type in anything you want, as long as the EEPROM size is compatible.

It is worth mentioning that there is a great risk of arbitrarily brushing into BIOS, which may lead to GPU failure or shortening of life. If you have this idea, we strongly recommend using a graphics card that supports dual BIOS functions.