GRUB Cryptographic memcmp Buffer Overflow DoS

The vulnerability of the grubcryptomemcmp function in the GNU GRUB formerly Grub2 operating system is related to the disclosure of information due to timing discrepancies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...

Grub2 normal_exit() DoS

The vulnerability of the normalexit function in the Grub2 operating system loader is related to the pointer being set to an expired value. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Grub2 Buffer Overflow DoS

The vulnerability of Grub2 operating system loaders is related to incorrect calculation of buffer size during the processing of received packets. Exploiting this vulnerability can allow an attacker to cause a service failure...

Advisory ROSA-SA-2025-2996

software: grub2 2.06 WASP: ROSA-CHROME unaffected versions = grub2-2.06-23 affected versions grub2-2.06-23 CVE-ID: CVE-2024-45777 BDU-ID: 2025-07120 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the gettext component of the Grub operating systems loader is related to integer overflow. Exploitation...

Grub2 rmmod Confidential Data Compromise

The vulnerability of the rmmod command, which is used by the Grub2 operating system loader, lies in the lack of checks to ensure that loaded modules are indeed present. Exploiting this vulnerability can allow an attacker to access confidential data, compromise data integrity, and cause service...

Grub2 Integer Overflow DoS

The vulnerability of the Grub2 operating system loader is related to a numerical overflow of the UINT32 value. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Grub2 Heap Buffer Overflow DoS

The vulnerability of the grubscriptfunctioncreate function, which is part of the Grub2 operating system loader, stems from an error in function overriding. This function is already being executed. Exploiting this vulnerability could allow a perpetrator to access confidential data, compromise data...