Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

A 16-year-old buffer overflow flaw in EDK II's UEFI network boot code allows attackers on the local network to crash or run code on servers before Secure Boot activates. The vulnerability affects PXE boot and requires no authentication but needs precise firmware targeting. No patched stable release is available yet, though a fix exists.