GRUB2 (gettext / message catalogue): Second integer overflow in the same translation path, producing a heap

Impact

Second integer overflow in the same translation path, producing a heap out-of-bounds write and pre-boot code execution.

Who can reach it

Attacker-supplied locale catalogue on the boot partition.

What to do

grub2 package update + reboot; covered by the same distro update as the rest of the batch.

References