Attackers Can Exploit ICMP Error Handling Before Operating System Protections Load. A critical buffer overflow in TianoCore’s EDK II UEFI firmware, tracked as CVE-2026-97631, could let unauthenticated attackers execute code during PXE network boot before OS security checks begin, exposing systems to pre-boot compromise despite an upstream source fix.
First seen on govinfosecurity.com
Jump to article: www.govinfosecurity.com/critical-uefi-flaw-exposes-systems-to-pre-boot-attacks-a-33252
