Out-of-Bounds Write Vulnerability in GRUB2 Network Boot Process

CVE-2025-0624

Summary

A vulnerability in the GRUB2 bootloader allows an attacker on the same network segment to execute arbitrary code by exploiting a flaw in the network boot process. When GRUB2 attempts to find a configuration file, it copies data from a user-controlled environment variable into an internal buffer without adequately checking the variable's length. This oversight can lead to an out-of-bounds write, potentially allowing for remote code execution that bypasses secure boot protections, posing serious security risks.

References