Secure Boot bypass via signed UEFI app NVRAM write (CVE-2025-3052)

Aynı bug/CVE: CVE-2025-3052 = VU#806555. Tam yazım canonical not'ta: bkz. Secure Boot bypass via misused NVRAM variable.

Mechanism

CVE-2025-3052, VU#806555'in kataloglanmış hâlidir — aynı root cause: Microsoft tarafından imzalı DTResearch UEFI utility'si IhisiParamBuffer NVRAM variable'ını pointer olarak okuyup gSecurity2 üzerine arbitrary write veriyor. Tam mekanizma canonical not'ta: Secure Boot bypass via misused NVRAM variable.

Walkthrough

Tam walkthrough canonical not'ta: Secure Boot bypass via misused NVRAM variable.

References

• CVE-2025-3052 — Wiz Vulnerability Database
• VU#806555 — CERT/CC
• Another Crack in the Chain of Trust: Uncovering (Yet Another) Secure Boot Bypass — Binarly