Critical EDK2 UEFI flaw CVE-2026-97631 allows code execution before the OS boots
🤖 AI-generated content — The title and summary were produced automatically by artificial intelligence, without human editorial review.
CVE-2026-97631, rated 9.5/10, is a memory-corruption bug in an ICMP component of TianoCore EDK II, the open-source UEFI stack used by AMI, Insyde, Phoenix and Microsoft’s Project Mu on most servers. Attackers can run malicious code before the OS and defenses such as Secure Boot; payloads from this flaw do not persist but can pave the way for other early-boot malware.
Continue in the app — vote & join in ➔Source: Ars Technica · via ahirlevel.hu