GRUB2 (font engine, blit_comb): Integer underflow when rendering certain unicode sequences writes out of bounds

CVE-2022-3775Firmware, BMC & network fabriccurated

Impact

Integer underflow when rendering certain unicode sequences writes out of bounds. Same class as the glyph-construction bug and shipped in the same advisory wave - if you patched one you probably need both.

Who can reach it

Crafted font or text rendered by GRUB, reachable by anyone who can write boot-partition content.

What to do

grub2 package update + reboot. Verify your distro's package covers both font CVEs, not just the first.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-3775 https://access.redhat.com/security/cve/CVE-2022-3775

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.