GCVE-110-BRLY-2026-062

BRLY-2026-062 High BINARLY REsearch has discovered a stack overflow vulnerability in fwupd EFI application. This application is typically signed by operating system (OS) vendors and authorised for execution by `shim`, which is signed using keys corresponding to the Microsoft Corporation UEFI CA. Executing code in this application allows attackers to run arbitrary code below the OS with Secure Boot enabled.