AZL-57632 CVE-2025-1125 affecting package grub2 for versions less than 2.06-15

When reading data from a hfs filesystem, grub's hfs filesystem module uses user-controlled parameters from the filesystem metadata to calculate the internal buffers size, however it misses to properly check for integer overflows. A maliciouly crafted filesystem may lead some of those buffer size...

PT-2023-9681 · Grub · Grub

Name of the Vulnerable Software and Affected Versions: GRUB affected versions not specified Description: The issue is related to a buffer overflow when reading memory in the NTFS driver of the GRUB operating system loader. Exploitation of this issue may allow an attacker to read the contents of t...