FwHunt

FwHunt Das Binarly Firmware Hunt FwHunt-Regelformat wurde entwickelt, um nach bekannten Schwachstellen in UEFI-Firmware zu suchen. Verwendung FwHunt-Regeln sind für die Verwendung mit Binarlys FwHunt Community Scanner konzipiert; vollständige Installationsanweisungen und Nutzungsinformationen...

GIGABYTE-H510M-K-V2-BIOS-SMM-Reverse-Engineering-CVE-2025-7026-7027-7028-7029-Research

GIGABYTE H510M K V2 BIOS SMM Reverse-Engineering & Forschung zu CVE-2025-7026/7027/7028/7029 Statisches Reverse-Engineering eines GIGABYTE H510M K V2 H510MKV2.F3 BIOS-Images: vollständige UEFI-Firmware-Volume-Extraktionsanalyse des PI-Spezifikations-SMM-Core-Speicher- Allokators und eine gezielte...

SupplyChainAttacks

Attacchi alla catena di fornitura del firmware Questo repository offre una raccolta curata e completa di attacchi documentati alla catena di fornitura del firmware, scoperti o analizzati dal team Binarly REsearch. Mantenuto da Binarly, il progetto funge da risorsa educativa e di riferimento per...

Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot

Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program that starts up hardware as varied as home routers, smart cameras, and the management chips inside data-center servers. Four of the bugs can crash a device. The other two could let an attacker who...

Image files in UEFI can be abused to modify boot behavior

Overview Implementation of Unified Extensible Firmware Interface UEFI by Vendors provide a way to customize logo image displayed during the early boot phase. Binarly has uncovered vulnerabilities in the image parsing libraries that provide this capability. An attacker with local privileged access...

New Study Finds Most Enterprise Vendors Failing to Mitigate Speculative Execution Attacks

With speculative execution attacks remaining a stubbornly persistent vulnerability ailing modern processors, new research has highlighted an "industry failure" to adopt mitigations released by AMD and Intel, posing a firmware supply chain threat. Dubbed FirmwareBleed by Binarly, the information...

BSA-2022-1763

Security Advisory ID : BSA-2022-1763 Component : InsydeH2O firmware framework code Revision : 1.0 Brocade has become aware ofseveral 23 memory management vulnerabilities that were disclosed by Binarly.Insyde's H2O UEFI firmware contains several 23 high-impact vulnerabilities.These vulnerabilities...