Network-Boot

vulnerabilities 2026-10-31
EDK II PXE Flaw (CVE-2026-97631): One Oversized ICMP Error Corrupts Server Firmware Before the OS Loads
A CVSS 9.5 buffer overflow in TianoCore EDK II's PXE driver lets an unauthenticated network attacker corrupt memory in the DXE phase of a booting server, ahead of Secure Boot and any OS controls.
uefi firmware rce network-boot pxe bare-metal

EDK II PXE Flaw (CVE-2026-97631): One Oversized ICMP Error Corrupts Server Firmware Before the OS Loads