A security issue has been found in edk2 In the function FpdtStatusCodeListenerPei(), the pointer BootPerformanceTable is read directly from an NVRAM variable ("FirmwarePerformance") Memory is then updated at that address A local attacker may modify the variable at his will, and after reboot the vulnerable code will update memory at the attacker ...
Documentation, examples, and other resources regarding analyzing EDK2 based UEFI firmware
CERT/CC UEFI Analysis Resources
This repo is a collection of documentation notes and code pertaining to analyzing vulnerabilities in UEFI firmware built from the EDK2 project
docs
The docs folder contains notes and documentation regarding setting up an analysis environment and reproducing various vulnerabilities in firmware built with EDK2
EDK2 Packages
SimplePkg
The SimplePk
Vulmon