CVE-2025-0690

Summary

CVE-2025-0690 is a vulnerability affecting the read command, which is used to read keyboard input. The issue lies in the way the input length is kept in a 32-bit integer value and used to reallocate the line buffer. With a large enough line, this variable can overflow, resulting in an out-of-bounds write in the heap-based buffer. This vulnerability can be exploited to corrupt critical data in grub, potentially leading to a secure boot bypass.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.