
The Unified Extensible Firmware Interface (UEFI), a set of routines that boot an operating system, carries almost a dozen vulnerabilities which, when chained together, can be used to deploy malware at firmware level.
This is according to a new report from Quarkslab, who detailed the flaws, and a proof-of-concept solution.