Out-of-Bounds Write Vulnerability in GRUB2 Affecting Red Hat Products

CVE-2022-3775

What is CVE-2022-3775?

The vulnerability in the GRUB2 bootloader arises from improper validation of the dimensions of unicode glyphs during font rendering. This flaw can be exploited by an attacker to input manipulated data, resulting in an out-of-bounds write into the GRUB2 heap. Such memory corruption may lead to system instability and, in complex scenarios, could potentially allow for arbitrary code execution.

References