Critical UEFI Firmware Flaw (CVE-2026-97631) Disclosed, Rated 9.5/10

A critical memory-corruption bug, tracked as CVE-2026-97631 with a severity rating of 9.5 out of 10, has been made public. The flaw resides in an ICMP component of TianoCore EDK II, a widely used open-source codebase for UEFI firmware. This vulnerability could allow code execution during boot, before operating system defenses are active, potentially impacting confidentiality, integrity, and availability.