Some people (e.g. authors of [1]) consider the UEFI reference implementation to be of poor quality. There was an exploitable (for privilege escalation from typi

Some people (e.g. authors of [1]) consider the UEFI reference implementation to be of poor quality. There was an exploitable (for privilege escalation from typical userspace administrator to system management mode) integer overflow there, and it wasn't a particularly tricky one[1]. [1] https://www.mitre.org/sites/default/files/publications/14-2221-extreme-escalation-presentation.pdf https://www.mitre.org/sites/default/files/publications/14-22...