CVE-2025-0686
CVSS 3.1 Score 6.4 of 10 (medium)
Details
Published Mar 3, 2025
CWE ID 787
Summary
CVE-2025-0686 is a vulnerability affecting the grub2 system. In this issue, the romfs filesystem module utilizes user-controlled parameters for determining buffer sizes, failing to adequately check for integer overflows. Maliciously crafted filesystems can exploit this flaw, leading to out-of-bounds writes during grub_romfs_read_symlink(). This can result in corruption of critical data and bypassing secure boot protections, potentially enabling arbitrary code execution.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.