efi_fuzz

efifuzz 一个简单的、基于覆盖引导的用于 UEFI NVRAM 变量的模糊测试工具。 基于 Qiling 和 AFL++。 由 Itai Liba @liba2k 和 Assaf Carlsbad @assafcarlsbad 编写。 使用方法 使用 Docker 环境 1. 构建镜像： docker build -t efifuzz . 2. 测试环境： docker run -v $PWD:/efifuzz -it efifuzz sh -c "cd efifuzz/tests/ && pytest -s -v -W ignore::DeprecationWarning" 3...

CVE-2025-7027 SMM Arbitrary Write via Dual-Controlled Pointers in CommandRcx1

A vulnerability in the Software SMI handler SwSmiInputValue 0xB2 allows a local attacker to control both the read and write addresses used by the CommandRcx1 function. The write target is derived from an unvalidated UEFI NVRAM variable SetupXtuBufferAddress, while the write content is read from a...

Fedora 19 : kernel-3.9.4-301.fc19 (2013-10050)

Bugfix update to 3.9.4. Fixes UEFI NVRAM space issues that prevented booting on some machines. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possibl...