CVE-2023-4692

Summary

CVE-2023-4692 is a critical vulnerability affecting grub2's NTFS filesystem driver. An out-of-bounds write flaw identified in this driver could allow a malicious actor to present a specially crafted NTFS filesystem image, resulting in heap metadata corruption. In extreme cases, the UEFI firmware heap metadata may also be compromised, potentially enabling arbitrary code execution and secure boot protection bypass. This vulnerability represents a significant threat to system security and requires immediate attention and patching.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.