An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the password hash for the…

Grub2: fs/tar: integer overflow causes heap oob write

Grub2: grub-core/gettext: integer overflow leads to heap oob write.

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit

A flaw was found in grub2 in versions prior to 2.06

A flaw was found in grub2 in versions prior to 2.06

There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size

Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address

Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat

Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data

Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data

If certificates that signed grub are installed into db, grub can be booted directly

In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size

Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the…

GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function…

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed

Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser

There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems

There is an issue on grub2 before version 2.06 at function read_section_as_string()

A flaw was found in the grub2-set-bootflag utility of grub2

Grub2: fs/bfs: integer overflow in the bfs parser.

GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks

An out-of-bounds read flaw was found on grub2's NTFS filesystem driver

A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area

A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files