CVE-2026-97631, rated 9.5/10, is a memory-corruption flaw in the ICMP component of TianoCore EDK II’s PXE-Base Code driver.
It can enable code execution early in boot, before Secure Boot and TPM defenses load.
Exploitation requires low-level local-network or insider access; affected systems use EDK II and PXE to boot from a local network.
The issue is located in TianoCore EDK II, an open-source code base used to build the core boot software. The issue has been given a severity rating of 9.5 out of 10.
The vulnerability is due to a memory management error in a network communication component responsible for loading data from the local network.
Who is affected and what is required?
According to the researchers who discovered the issue, exploiting the problem requires local network access or internal system access, and is not an initial entry point.
↳
READ ALSO
HACKS.GR / RELATED
Vulnerabilities & Security Updates
Apple releases security updates for older iPhones and iPads
↗
The issue affects servers, storage equipment, and devices that boot using code from a local network with certain features enabled. Home users and small offices whose devices boot exclusively from storage drives are not affected.
Intel said that none of its commercial products under security support are known to be affected, while Arm said the issue does not directly affect its portfolio, even though both companies widely use the specific reference code.
How the problem was discovered
The issue came to light when a hardware manufacturer prematurely published code and details of a fix for the problem. Following the release, project members issued an official warning to the public.
G
HACKS.GR / GOOGLE SEARCH
Hacks.gr on Google
Set Hacks.gr as a preferred source.
Preferred source
↗
end of article
Top comments (0)