CVE-2025-0690

CVE-2025-0690: GRUB2 정수 오버플로우 취약점 🛡️ 개요 CVE-2025-0690 는 부트로더 GRUB2 의 정수 오버플로우 취약점으로, 임의 코드 실행 및 Secure Boot 우회 를 허용합니다. 이 결함은 보안 부팅을 위해 GRUB2에 의존하는 시스템에 영향을 미치며, 운영 체제가 시작되기 전에 시스템을 노출시킵니다. 🔍 기술 세부 사항 근본 원인 취약한 명령어 : read 키보드 입력 수신에 사용됨. 문제 : 입력 길이가 32비트 정수 에 저장됩니다. 익스플로잇 메커니즘 : 매우 긴 텍스트 줄을 입력합니다...

CVE-2022-21894

baton drop CVE-2022-21894: vulnerabilità di bypass della funzionalità di sicurezza Secure Boot Le applicazioni di avvio di Windows consentono all'impostazione truncatememory di rimuovere blocchi di memoria contenenti intervalli "persistenti" di dati serializzati dalla mappa di memoria, portando a...

BlackLotus

BlackLotus BlackLotus è un innovativo Bootkit UEFI progettato specificamente per Windows. Include un bypass integrato di Secure Boot e protezione Ring0/Kernel per proteggere da qualsiasi tentativo di rimozione. Questo software ha lo scopo di funzionare come un caricatore HTTP. Grazie alla sua...

CVE-2025-47827

CVE-2025-47827 Prova di concetto e rapporto di vulnerabilità per CVE-2025-47827. Contenuti Descrizione Divulgazione Impatto Rilevamento Mitigazione Binari Prova di concetto Risorse Descrizione In IGEL OS precedenti alla v11, Secure Boot può essere aggirato perché il modulo igel-flash-driver...

initroot

initroot: Iniezione della riga di comando del kernel del bootloader Motorola, bypass del boot sicuro e del blocco del dispositivo CVE-2016-10277 Di Roee Hay / Aleph Research, HCL Technologies Exploit di primo stadio: Jailbreak temporaneo Questo exploit ottiene un accesso root illimitato effimero...

CVE-2026-50719

The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and before invoking signature verification. The init table parser supports full-address 32-bit write operations, allowing...

CVE-2026-50719

The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and before invoking signature verification. The init table parser supports full-address 32-bit write operations, allowing...

EUVD-2026-62479

The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and before invoking signature verification. The init table parser supports full-address 32-bit write operations, allowing...

EUVD-2026-62480

The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modifie...

CVE-2026-50719

The Ingenic T41 SoC boot ROM (and likely T32, T40, and A1 ) parses and executes an attacker-controlled init table from the SPL header before performing any secure boot state check or signature verification. Because the init table parser supports full-address 32-bit write operations , an attacker ...

CVE-2025-59327

In CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4, bootxsa.efi fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

Astra Linux – Vulnerability in grub2

A flaw was discovered in grub2. A specially crafted JPEG file can cause the JPEG parser in grub2 to incorrectly check the boundaries of its internal buffers, leading to an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is still a concer...

Astra Linux – Vulnerability in grub2

A flaw was discovered in grub2. When reading the name of a symbolic link from a UFS filesystem, grub2 fails to validate the string length provided as input. This lack of validation may lead to a heap out-of-bounds write, causing data integrity issues and potentially allowing an attacker to...

Astra Linux – Vulnerability in grub2

A flaw was discovered in grub2. The calculation of the translation buffer when reading a language .mo file in grubgettextgetstrfromposition may overflow, resulting in an out-of-bound write. This issue can be exploited by an attacker to overwrite grub2’s sensitive heap data, ultimately allowing th...

CVE-2026-11835

Time-of-check time-of-use TOCTOU vulnerability combined with missing input validation in Caliptra Core ROM UpdateResetFlow::run in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configur...

CVE-2026-11835 Caliptra Update-Reset Secure-Boot Bypass via Attacker-Chosen AXI Staging Address (TOCTOU)

Time-of-check time-of-use TOCTOU vulnerability combined with missing input validation in Caliptra Core ROM UpdateResetFlow::run in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configur...

CVE-2026-11835 Caliptra Update-Reset Secure-Boot Bypass via Attacker-Chosen AXI Staging Address (TOCTOU)

Time-of-check time-of-use TOCTOU vulnerability combined with missing input validation in Caliptra Core ROM UpdateResetFlow::run in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configur...

CVE-2026-11835 Caliptra Update-Reset Secure-Boot Bypass via Attacker-Chosen AXI Staging Address (TOCTOU)

Time-of-check time-of-use TOCTOU vulnerability combined with missing input validation in Caliptra Core ROM UpdateResetFlow::run in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configur...

CVE-2026-11835

Time-of-check time-of-use TOCTOU vulnerability combined with missing input validation in Caliptra Core ROM UpdateResetFlow::run in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configur...

EUVD-2026-52549

Time-of-check time-of-use TOCTOU vulnerability combined with missing input validation in Caliptra Core ROM UpdateResetFlow::run in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configur...