CRITICAL 'LOGOFAIL' BUGS OFFER SECURE BOOT BYPASS FOR MILLIONS OF PCS

Summary from the TLDR InfoSec newsletter

Hundreds of consumer and enterprise-grade x86 and ARM models from various vendors, including Intel, Acer, and Lenovo, are potentially vulnerable to bootkits and takeover. ‘LogoFAIL’ reveals significant security vulnerabilities in the image parsing libraries used by nearly all BIOS vendors to display logo images during boot.