Critical flaw in EDK2 allows attackers to execute code early in the boot process.