cve/2024/CVE-2024-7344.md

CVE-2024-7344

Description

Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.

POC

Reference

• https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.html
• https://www.welivesecurity.com/en/eset-research/under-cloak-uefi-secure-boot-introducing-cve-2024-7344/

Github

• https://github.com/0xAtef/0xAtef
• https://github.com/DevGreick/devgreick
• https://github.com/felipealfonsog/felipealfonsog
• https://github.com/francolop/0XC0DE-TP3
• https://github.com/frlc/frlc