Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

PixieFail: Nine vulnerabilities in Tianocore's EDK II IPv6 network stack.

blog.quarkslab.com | research | #vulnerability | #ipv6 | #uefi | #edk2 | #pxe | #tianocore

Summary

PixieFail: nine vulnerabilities in the IPv6 network stack of EDK II, TianoCore's open-source UEFI reference implementation, exploitable during network boot (PXE) on many enterprise machines.
Published
Collected

original ↗

Related coverage

  1. For Science! - Using an Unimpressive Bug in EDK II to Do Some Fun Exploitation (blog.quarkslab.com)
  2. Being Overlord on the Steam Deck with 1 Byte (blog.quarkslab.com)
  3. Heap Overflow in OpenBSD's slaacd via Router Advertisement (blog.quarkslab.com)
  4. dinosn/givewp-cve-2026-82222-rce-lab: GiveWP CVE-2026-82222 RCE Docker Lab & PoC (github.com)
  5. Route of Root: Bring a "DoS only" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF (nebusec.ai)
  6. Analysis of a Windows IPv6 Fragmentation Vulnerability: CVE-2021-24086 (blog.quarkslab.com)

back