LogoFAIL: Security Implications of Image Parsing During System Boot

...Enter LogoFAIL, our latest research revealing significant security vulnerabilities in the image parsing libraries used by nearly all BIOS vendors to display logo images during boot. Our research highlights the risks associated with parsing complex file formats at such a delicate stage of the platform startup. During this talk, we will show how some UEFI BIOSes allow attackers to store custom logo images, which are parsed during boot, on the EFI system partition (ESP) or inside unsigned sections of a …

bios boot display file image images latest libraries logo logofail parsing platform research risks security stage startup system vendors vulnerabilities