CVE-2025-0677 affecting package grub2 for versions less than 2.06-25

CVE-2025-0677 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...

AZL-57513 CVE-2025-1125 affecting package grub2 for versions less than 2.06-25

When reading data from a hfs filesystem, grub's hfs filesystem module uses user-controlled parameters from the filesystem metadata to calculate the internal buffers size, however it misses to properly check for integer overflows. A maliciouly crafted filesystem may lead some of those buffer size...

AZL-57007 CVE-2025-0677 affecting package grub2 for versions less than 2.06-25

A flaw was found in grub2. When performing a symlink lookup, the grub's UFS module checks the inode's data size to allocate the internal buffer to read the file content, however, it fails to check if the symlink data size has overflown. When this occurs, grubmalloc may be called with a smaller...