Grub2 vulnerabilities
We track 2 vulnerabilities in Grub2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 19, 2022.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Grub2 vulnerabilities
- 7.1 High severity
grub2: Out-of-bounds Write
When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's
- 8.6 High severity
grub2: Heap-based Buffer Overflow
A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph, this further leads to a buffer overflow and a hea