A pair of security researchers have found a buffer overflow vulnerability within the implementation of the unified extensible firmware interface (UEFI) within the EDK1 project used in firmware development.. Bromium researcher Rafal Wojtczuk and MITRE Corp's Corey Kallenberg said the bug in the FSVariable.c source file was linked to a variable used to reclaim empty space on SPI flash chips. The link for this article located at The Register UK is no longer available. . An investigation reveals a critical buffer overflow vulnerability in UEFI EDK1 firmware, presenting major security threats; learn more about the risks involved. Buffer Overflow, Firmware Security, UEFI EDK1. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.