72 matches found
PT-2026-20928
NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular NextOffset chains cause an infinite loop, and deeply nested directories cause unbounded recursion stack overflow in the ROMFS archive parser. Version 6.0.1630.0 patches the issue...
NanaZip 安全漏洞
NanaZip is a compression software open source by the M2-Team. Versions of NanaZip from 5.0.1252.0 to 6.0.1630.0 contained security vulnerabilities. These vulnerabilities were caused by the NextOffset loop and deeply nested directories within the ROMFS archive parser, which could lead to infinite...
PT-2026-22924
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel has an issue where romfs fill super does not check the return value of sb set blocksize. This can lead to a kernel BUG in folio set bh if a loop device's block size is s...
EUVD-2025-5576
Malicious code in bioql PyPI...
Advisory ROSA-SA-2025-2996
software: grub2 2.06 WASP: ROSA-CHROME unaffected versions = grub2-2.06-23 affected versions grub2-2.06-23 CVE-ID: CVE-2024-45777 BDU-ID: 2025-07120 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the gettext component of the Grub operating systems loader is related to integer overflow. Exploitation...
Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat
...
Linux Distros Unpatched Vulnerability : CVE-2020-29371
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in romfsdevread in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd...
The vulnerability of the romfs component in the Grub2 operating system loader allows a hacker to trigger a service failure.
The vulnerability of the romfs component in the operating system Grub involves writing beyond the boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-0686
A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciously crafted...
AZL-57672 CVE-2025-0686 affecting package grub2 for versions less than 2.06-15
A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciously crafted...
DEBIAN-CVE-2025-0686
A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciously crafted...
AZL-57700 CVE-2025-0686 affecting package grub2 for versions less than 2.06-25
A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciously crafted...
CVE-2025-0686
A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciously crafted...
CVE-2025-0686
Affects grub2 ROMFS symlink handling (CVE-2025-0686). The romfs module uses user-controlled geometry parameters to size buffers in symlink lookups and fails to guard integer overflows, allowing buffer size miscalculation. This can cause grub_malloc to allocate too small a buffer, leading to out-o...
Security update for grub2
This update for grub2 fixes the following issues: CVE-2024-45781: Fixed strcpy overflow in ufs. bsc1233617 CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. bsc1234958 CVE-2024-45782: Fixed strcpy overflow in hfs. bsc1233615 CVE-2024-45780: Fixed an overflow in tar/cpio. bsc1233614...
PT-2025-7465
Name of the Vulnerable Software and Affected Versions romfs affected versions not specified Description The issue is related to an integer overflow when handling symlinks, which may lead to a heap-based out-of-bounds write when reading data. Recommendations At the moment, there is no information...
RT-Thread dfs_v2 romfs function buffer overflow vulnerability
RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from a buffer overflow vulnerability that stems from the dfsv2 romfs file failing to properly validate the length size of input data, which can be exploited by remote attackers to execute...
CVE-2024-24335
A heap buffer overflow occurs in the dfsv2 romfs filesystem RT-Thread through 5.0.2...
CVE-2024-24335
A heap buffer overflow occurs in the dfsv2 romfs filesystem RT-Thread through 5.0.2...
RT-Thread 安全漏洞
RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from a buffer overflow vulnerability that stems from the dfsv2 romfs file failing to properly validate the length size of input data, which can be exploited by remote attackers to execute...