PT-2025-7419

Name of the Vulnerable Software and Affected Versions grub2 affected versions not specified Description A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub gettext getstr from position may overflow, leading to an out-of-bound write. This...

PT-2025-7491

Name of the Vulnerable Software and Affected Versions Grub2 affected versions not specified Description A flaw was found in Grub2, where the dump command is not blocked when Grub is in lockdown mode. This allows a user to read any memory information, and an attacker may leverage this to extract...

PT-2025-7459

Name of the Vulnerable Software and Affected Versions grub2 affected versions not specified Description A flaw was found in grub2 during the network boot process. When trying to search for the configuration file, grub copies data from a user-controlled environment variable into an internal buffer...

Advisory ROSA-SA-2025-2683

Software: grub2 2.02 OS: ROSA Virtualization 3.0 packageevrstring: grub2-2.02-148.0.3 CVE-ID: CVE-2022-2601 BDU-ID: 2022-06819 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the grubfontconstructglyph function of the Grub2 operating systems boot loader is related to an operation exceeding buffer...

PT-2025-6690

Name of the Vulnerable Software and Affected Versions grub2 affected versions not specified Description A defect was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string length taken as an input. This lack of validation may lead to a heap...

PT-2025-6687

Name of the Vulnerable Software and Affected Versions grub2 affected versions not specified Description A flaw in the JPEG parser allows a specially crafted JPEG file to cause incorrect bounds checking of internal buffers, leading to an out-of-bounds write. This condition could potentially allow ...

PT-2025-6692

Name of the Vulnerable Software and Affected Versions Grub2 affected versions not specified Description A defect was found in Grub2 related to the handling of HFS+ filesystems. When Grub2 fails to mount an HFS+ filesystem, the hfsplus filesystem driver does not properly set an ERRNO value. This...

Azure Linux 3.0 Security Update: grub2 (CVE-2022-2601)

The version of grub2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2601 advisory. - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow wh...

Azure Linux 3.0 Security Update: grub2 (CVE-2022-3775)

The version of grub2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3775 advisory. - When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's...

Advisory ROSA-SA-2025-2606

software: grub2 2.06 WASP: ROSA-CHROME packageevrstring: grub2-2.06-22 CVE-ID: CVE-2023-4692 BDU-ID: 2023-06822 CVE-Crit: LOW CVE-DESC.: A vulnerability in the fs/ntfs.c component of the Grub2 operating systems loader is related to a buffer overflow in dynamic memory. Exploitation of the...

PT-2025-6688 · Grub2 +5 · Grub2 +5

Name of the Vulnerable Software and Affected Versions: grub2 affected versions not specified Description: A flaw was found in grub2 where the grub extcmd dispatcher function calls grub arg list alloc to allocate memory for the grub's argument list. However, it fails to check in case the memory...

PT-2025-7466

Name of the Vulnerable Software and Affected Versions GRUB affected versions not specified Description A heap-based buffer overflow issue exists in the grub udf read block function, potentially allowing for arbitrary code execution. Recommendations At the moment, there is no information about a...

PT-2025-6835

Name of the Vulnerable Software and Affected Versions GNU grub2 affected versions not specified Description A issue has been identified in GNU grub2 related to an hfs out-of-bounds write. Recommendations At the moment, there is no information about a newer version that contains a fix for this iss...

PT-2025-7462

Name of the Vulnerable Software and Affected Versions squash4 affected versions not specified Description The issue is related to an integer overflow that may cause a heap-based out-of-bounds write when reading data. Recommendations At the moment, there is no information about a newer version tha...

CVE-2024-56737

GNU GRUB aka GRUB2 through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem...

CVE-2024-56738

GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...