LogoFAIL bugs in UEFI code allow planting bootkits via images
A group of security flaws known as LogoFAIL impact image-parsing parts of the UEFI code from different vendors. Researchers alert the public to the possibility that they could be used to distribute bootkits and control the booting process's execution flow.
The problems affect both x86 and ARM architectures because they are in the image parsing libraries that vendors use to display logos during booting.
Researchers at the firmware supply chain security platform Binarly claim that the branding has added needless security risks, allowing malicious payloads to be executed by injecting image files read more LogoFAIL bugs in UEFI code allow planting bootkits via images.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverag...