Lucene search

K
redhatcveRedhat.comRH:CVE-2022-3775
HistoryNov 15, 2022 - 6:43 p.m.

CVE-2022-3775

2022-11-1518:43:55
redhat.com
access.redhat.com
109

0.0004 Low

EPSS

Percentile

5.2%

A flaw was found in the grub2 font code. When rendering certain unicode sequences, it fails to properly validate the font width and height. These values are further used to access the font buffer, causing possible out-of-bounds writes. A malicious actor may craft a font capable of triggering this issue, allowing modifications in unauthorized memory segments, causing data integrity problems or leading to denial of service.