bootloader vulnerability