CVE-2020-10565

CVE-2020-10565 affects grub2-bhyve in FreeBSD bhyve prior to revision 525916. The root cause is that the guest-provided address in a memrw read_/write_ operation via grub2.cfg is not validated, enabling an untrusted guest to perform arbitrary reads/writes within the grub-bhyve process and potenti...