---
id: 4401
title: "For Science! - Using an Unimpressive Bug in EDK II to Do Some Fun Exploitation"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/for-science-using-an-unimpressive-bug-in-edk-ii-to-do-some-fun-exploitation.html"
published_at: "2023-06-22T22:00:00Z"
tags: ["exploitation", "firmware", "vulnerability", "uefi", "smm", "edk2"]
phying_url: "https://phying.com/item/4401"
lang: en
---

# For Science! - Using an Unimpressive Bug in EDK II to Do Some Fun Exploitation

## Summary

Turning a limited write primitive in EDK II's Tcg2Smm module into SMM code execution — the flaw only lives before the end of the DXE phase, so it chains into pre-boot privilege escalation.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2023-06-22T22:00:00Z
- **Original:** https://blog.quarkslab.com/for-science-using-an-unimpressive-bug-in-edk-ii-to-do-some-fun-exploitation.html
- **Phying News:** https://phying.com/item/4401