CVE-2022-3775

Katalog CVE

CVSS 7.1 · High EPSS 1,0%

Kerentanan Out-of-bounds Write pada gnu grub2, redhat enterprise linux. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption and availability issues. Although complex, arbitrary code execution could not be discarded.

Rincian

Terbit di NVD

19 Desember 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 63,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/cve-2022-3775 advisory pihak ketiga
• https://security.gentoo.org/glsa/202311-14