Metis fuzzing discovers 137 bugs in UEFI edk2 bootloader protocols
Metis rehosts edk2 protocols as user-space applications and achieves 73.1 percent coverage, 1.7 times higher than FuzzUEr, reporting 26 previously unknown bugs to vendors.
Stories per day · 30 days
1 RSS
2 stories, newest first · one card per story
Stories tagged #bootloader
GNU GRUB 2.14: serial-MMIO lockdown bypass in Canonical-signed gcdx64.efi
Canonical-signed GRUB2 serial command accepts arbitrary MMIO addresses, letting local attackers with grub.cfg control bypass Secure Boot lockdown.