A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerability can lead to data corruption and eventual code execution or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2022-07-06T15:06:47

Updated: 2024-08-03T17:01:08.539Z

Reserved: 2021-08-10T00:00:00

Link: CVE-2021-3697

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-07-06T16:15:08.320

Modified: 2024-11-21T06:22:10.820

Link: CVE-2021-3697

cve-icon Redhat

Severity : Moderate

Publid Date: 2022-06-07T00:00:00Z

Links: CVE-2021-3697 - Bugzilla