Pre-boot RCE in EDK II PXE Driver

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description ---|--- CVE-2026-97631 non-AMD| https://vulners.com/cve/CVE-2026-97631...

ghidra-firmware-utils

Ghidra Firmware Utilities Various modules for Ghidra to assist with PC firmware reverse engineering. This was accepted as a coreboot project for GSoC 2019. Features PCI option ROM loader Implements a FS loader for PCI option ROMs handles hybrid ROMs with multiple images, e.g. legacy x86 + UEFI...

Barzakh

Project Barzakh برزخ "Barzakh" برزخ — a barrier between two realms; the unseen boundary separating the living world from the world of spirits. Here it stands for the barrier between offense and defense, between vulnerability and detection. The most comprehensive open-source UEFI firmware security...

Exploit for CVE-2026-97631

EDK II PXE Security Lab — CVE-2026-97631 An educational labor...

EDK II Master PXE ICMP Error Buffer Overflow

EDK II master version as of 2026-09-14 contains an ICMP error handling buffer overflow in its PXE driver. This submission provides denial of service and experimental remote code execution proof of concept scripts for an isolated QEMU PXE environment. https://packetstorm.news/download/238180...

TianoCore EDK II PXE ICMP Error Buffer Overflow

TianoCore EDK II contains a buffer overflow in UefiPxeBcDxe ICMP error handling. This proof of concept harness sends oversized ICMP error packets during PXE boot against a local QEMU/OVMF lab. https://packetstorm.news/download/238194...

Exploit for CVE-2026-97631

PXE Zero Working lab exploit and business pack for CVE-2026-9...

Exploit for CVE-2026-97631

uefi-pxe-cve-2026-97631 — headless harness for the EDK II PXE...

Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

A critical 16-year-old flaw in EDK II , the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machine before its operating system loads, but only while the machine is booting over the network. UEFI firmware is the software that runs firs...

CVE-2026-97631 Pre-boot RCE in EDK II PXE driver

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality,...

CVE-2026-97631

The EDK2 project contains a pre-boot vulnerability within the BIOS environment, specifically affecting the PXE driver . The root cause involves an Incorrect Calculation of Buffer Size , leading to a Classic Buffer Overflow and Out-of-bounds Write during remote access. Successful exploitation can ...

Red Hat: CVE-2026-97631: edk2: Pre-boot RCE in EDK II PXE driver

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality,...

edk2

Proyecto EDK II Un entorno de desarrollo de firmware moderno, rico en funciones y multiplataforma para las especificaciones UEFI y PI de www.uefi.org. .. image::...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : EDK II vulnerabilities (USN-8865-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8865-1 advisory. It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL...

USN-8865-1 edk2 vulnerabilities

It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu...

USN-8865-1: EDK II vulnerabilities

It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu...

OESA-2026-4033 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot.CVE-2023-49721...

OESA-2026-3923 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write...

OESA-2026-3922 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write...

OESA-2026-3858 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write...