Buffer overflow in bootloader shim allows attackers to run code each time devices boot up.