CRITICALVulnerability
Global
Critical UEFI Flaw Exposes Systems to Pre-Boot Attacks
·Source: Bank Info Security
Updated:
Executive Summary
Attackers Can Exploit ICMP Error Handling Before Operating System Protections Load A critical buffer overflow in TianoCore's EDK II UEFI firmware, tracked as CVE-2026-97631, could let unauthenticated attackers execute c
Analysis
Attackers Can Exploit ICMP Error Handling Before Operating System Protections Load A critical buffer overflow in TianoCore's EDK II UEFI firmware, tracked as CVE-2026-97631, could let unauthenticated attackers execute code during PXE network boot before OS security checks begin, exposing systems to pre-boot compromise despite an upstream source fix.