64 matches found
CVE-2025-0686
A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciously crafted...
AZL-57672 CVE-2025-0686 affecting package grub2 for versions less than 2.06-15
A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciously crafted...
DEBIAN-CVE-2025-0686
A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciously crafted...
AZL-57700 CVE-2025-0686 affecting package grub2 for versions less than 2.06-25
A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciously crafted...
CVE-2025-0686
A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciously crafted...
CVE-2025-0686
Affects grub2 ROMFS symlink handling (CVE-2025-0686). The romfs module uses user-controlled geometry parameters to size buffers in symlink lookups and fails to guard integer overflows, allowing buffer size miscalculation. This can cause grub_malloc to allocate too small a buffer, leading to out-o...
Security update for grub2
This update for grub2 fixes the following issues: CVE-2024-45781: Fixed strcpy overflow in ufs. bsc1233617 CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. bsc1234958 CVE-2024-45782: Fixed strcpy overflow in hfs. bsc1233615 CVE-2024-45780: Fixed an overflow in tar/cpio. bsc1233614...
PT-2025-7465
Name of the Vulnerable Software and Affected Versions romfs affected versions not specified Description The issue is related to an integer overflow when handling symlinks, which may lead to a heap-based out-of-bounds write when reading data. Recommendations At the moment, there is no information...
RT-Thread dfs_v2 romfs function buffer overflow vulnerability
RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from a buffer overflow vulnerability that stems from the dfsv2 romfs file failing to properly validate the length size of input data, which can be exploited by remote attackers to execute...
CVE-2024-24335
A heap buffer overflow occurs in the dfsv2 romfs filesystem RT-Thread through 5.0.2...
CVE-2024-24335
A heap buffer overflow occurs in the dfsv2 romfs filesystem RT-Thread through 5.0.2...
RT-Thread 安全漏洞
RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from a buffer overflow vulnerability that stems from the dfsv2 romfs file failing to properly validate the length size of input data, which can be exploited by remote attackers to execute...
CVE-2024-24335
A heap buffer overflow occurs in the dfsv2 romfs filesystem RT-Thread through 5.0.2...
PT-2024-20368 · Rt-Thread · Rt-Thread
Name of the Vulnerable Software and Affected Versions: RT-Thread versions 5.0.2 and earlier Description: A heap buffer overflow occurs in the dfs v2 romfs filesystem. Recommendations: For RT-Thread versions 5.0.2 and earlier, at the moment, there is no information about a newer version that...
SUSE CVE-2020-29371
An issue was discovered in romfsdevread in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd...
CVE-2020-29371: An issue was discovered in romfs_dev_read in fs/romfs/storage.c
Security Advisory ID : BSA-2022-1195 Component : Kernel Revision : 1.0 An issue was discovered in romfsdevread in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd. Notes: Brocade Fabric OS does not utilize the problematic code...
SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0438-1)
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-3348: Fixed a use-after-free in nbdaddsocket that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point...
The vulnerability of the `romfs_dev_read` function in the Linux operating system’s kernel, which allows a hacker to gain unauthorized access to protected information.
The vulnerability of the romfsdevread function in the Linux operating system’s kernel is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
