LogoFAIL â attack on UEFI firmware through malicious logo substitution
Researchers from Binarly have identified a series of vulnerabilities in the image parsing code used in UEFI firmwares from various manufacturers. These vulnerabilities allow for remote code execution during boot by placing a specially formatted image in the ESP (EFI System Partition) or in parts of the firmware update that are not digitally signed. The proposed attack method can be used to bypass the secure boot mechanism [âŠ]
