CVE-2022-2601
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph, this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may use this vulnerability to circumvent the secure boot mechanism.
| CWE | CWE-122 |
| Vendor | n/a |
| Product | grub2 |
| Published | Dec 14, 2022 |
| Last Updated | Aug 22, 2024 |
Stay Ahead of the Next One
Get instant alerts for n/a grub2
Be the first to know when new unknown vulnerabilities affecting n/a grub2 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
n/a / grub2
grub2 2.06 and lower
References
bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2112975#c0 security.netapp.com: https://security.netapp.com/advisory/ntap-20230203-0004/ security.gentoo.org: https://security.gentoo.org/glsa/202311-14 arstechnica.com: https://arstechnica.com/security/2024/08/a-patch-microsoft-spent-2-years-preparing-is-making-a-mess-for-some-linux-users/