GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem

A buffer overflow was found in grub_font_construct_glyph()

A flaw was found in grub2 in versions prior to 2.06

A flaw was found in grub2 in versions prior to 2.06

A flaw was found in grub2, prior to version 2.06

Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->total_len value

Grub2: missing unregister call for gettext command may lead to use-after-free

Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data

Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)

Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution

Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver

There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up operating systems that doesn't support multiboot and do not…

The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems

A flaw was found in grub2 in versions prior to 2.06

A flaw was found in grub2 in versions prior to 2.06

A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled

Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service…

When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size

Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position

A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap

An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the password hash for the…

Grub2: fs/tar: integer overflow causes heap oob write

Grub2: grub-core/gettext: integer overflow leads to heap oob write.

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit

A flaw was found in grub2 in versions prior to 2.06

A flaw was found in grub2 in versions prior to 2.06

There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size

Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address

Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat

Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data

Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data

If certificates that signed grub are installed into db, grub can be booted directly

In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size

Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the…

GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function…

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed

Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser

There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems

There is an issue on grub2 before version 2.06 at function read_section_as_string()

A flaw was found in the grub2-set-bootflag utility of grub2

Grub2: fs/bfs: integer overflow in the bfs parser.

GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks

An out-of-bounds read flaw was found on grub2's NTFS filesystem driver

A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area

A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files

A flaw was found in the grub2-set-bootflag utility of grub2

A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content