PixieFail Bugs in UEFI Open Source Implementation Threaten Computers
A collection of security vulnerabilities found within the de facto open source implementation of the UEFI specification could expose systems to a range of threats, from remote code execution (RCE) and denial-of-service (DoS) to data leakage and DNS cache poisoning. The flaws – collectively referred to as PixieFail by researchers with French cybersecurity firm Quarkslab..