If the ISO file for an operating system is malicious, is it possible for it to overwrite UEFI code when booted (If secure boot is disabled)?
Asked
Active
Viewed 54 times
1
-
Unless the firmware itself enforces security like signed firmware updates any process with root/administrator permissions should be able to modify UEFI firmware. That is not limited to the OS installation phase. So yes, that should be possible. – Robert Feb 20 '22 at 12:49