UEFIs booting Windows and Linux devices can be hacked by malicious logo images.

Source: Just about every Windows and Linux device vulnerable to new LogoFAIL firmware attack