PIXIEFAIL: NINE VULNERABILITIES IN TIANOCORE'S EDK II IPV6 NETWORK STACK

Summary from the TLDR InfoSec newsletter

This blog post discusses nine vulnerabilities that have been discovered in the IPv6 network protocol stack of EDK II, TianoCore's open source reference implementation of UEFI. The vulnerabilities affect various vendors that use EDK II's NetworkPkg module, including Arm, Insyde Software, American Megatrends Inc., Phoenix Technologies Inc., and Microsoft Corporation.