FuzzUEr: Enabling Fuzzing of UEFI Interfaces on EDK-2

Date:

Presented our work on FuzzUEr, a novel fuzzing framework for testing UEFI firmware interfaces on EDK-2. This work discovered 20 zero-day security vulnerabilities in the latest version of EDK-II.

Paper