LogoFAIL

A collection of resources from the Binarly REsearch team related to the far reaching vulnerability, LogoFAIL. Including analysis from a 6-month industry post mortem of fixes.

Blind Trust and Broken Fixes: The Ongoing Battle with LogoFAIL

June 19, 2024
Alex Matrosov

In this follow-up research 6 months after public disclosure of LogoFAIL, we dive deeper into the shallow waters of the firmware supply chain confusion and the blind trust in the reference code and firmware developers. The Binarly Transparency Platform detects unfixed devices daily.

January 30, 2024

Inside the LogoFAIL PoC: From Integer Overflow to Arbitrary Code Execution

The Binarly REsearch team investigates how crashes of firmware parsers can be leveraged by attackers to achieve arbitrary code execution with firmware privileges during the boot process.

December 6, 2023

Finding LogoFAIL: The Dangers of Image Parsing During System Boot

The Binarly REsearch team investigated vulnerable image parsing components across the entire UEFI firmware ecosystem and found all major device manufacturers are impacted on both x86 and ARM-based devices.

November 29, 2023

The Far-Reaching Consequences of LogoFAIL

The Binarly REsearch team investigates vulnerable image parsing components across the entire UEFI firmware ecosystem and finds all major device manufacturers are impacted on both x86 and ARM-based devices.

Get a closer look at Binarly

Our team is available to talk to you about your specific requirements or to give you a full demo