Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-0665 State: PUBLISHED Published: 2025-02-05T09:16:49.038Z Last Updated: 2025-03-18T18:10:27.907Z Vendors: curl Products: curl Problem Types: CWE-1341 Multiple Releases of Same Resource or Handle Description: libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://curl.se/docs/CVE-2025-0665.json - https://curl.se/docs/CVE-2025-0665.html - https://hackerone.com/reports/2954286
CVE ID: CVE-2025-0666 State: PUBLISHED Published: 2025-05-07T07:38:07.341Z Last Updated: 2025-05-07T14:00:48.710Z Vendors: BOINC Products: BOINC Server Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: through 1.4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.compass-security.com/fileadmin/Research/Advisories/2025_01_CSNC-2025-002_BOINC_multiple_XSS.txt
CVE ID: CVE-2025-0667 State: PUBLISHED Published: 2025-05-07T07:38:50.926Z Last Updated: 2025-05-07T14:00:39.686Z Vendors: BOINC Products: BOINC Server Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: through 1.4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.compass-security.com/fileadmin/Research/Advisories/2025_02_CSNC-2025-003_BOINC_stored_XSS.txt
CVE ID: CVE-2025-0668 State: PUBLISHED Published: 2025-05-07T07:39:26.843Z Last Updated: 2025-05-07T14:00:31.615Z Vendors: BOINC Products: BOINC Server Problem Types: CWE-89 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: before 1.4.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.compass-security.com/fileadmin/Research/Advisories/2025_03_CSNC-2025-004_BOINC_multiple_SQLi.txt
CVE ID: CVE-2025-0669 State: PUBLISHED Published: 2025-05-07T07:39:59.434Z Last Updated: 2025-05-07T14:00:24.317Z Vendors: BOINC Products: BOINC Server Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in BOINC Server allows Cross Site Request Forgery.This issue affects BOINC Server: before 1.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.compass-security.com/fileadmin/Research/Advisories/2025_04_CSNC-2025-005_BOINC_CSRF.txt
CVE ID: CVE-2025-0670 State: PUBLISHED Published: 2025-09-02T13:24:49.472Z Last Updated: 2025-09-02T19:30:24.401Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Akinsoft Products: ProKuafor Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft ProKuafor allows Resource Leak Exposure.This issue affects ProKuafor: from s1.02.07 before v1.02.08. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0204
CVE ID: CVE-2025-0671 State: PUBLISHED Published: 2025-04-25T06:00:09.903Z Last Updated: 2025-04-25T20:09:44.643Z Vendors: Unknown Products: Icegram Express Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Icegram Express WordPress plugin before 5.7.50 does not sanitise and escape some of its Template settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f4e04f01-31cb-4f5e-9739-12f803600e60/
CVE ID: CVE-2025-0672 State: PUBLISHED Published: 2025-09-23T17:30:42.687Z Last Updated: 2025-09-25T16:01:00.676Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: WSO2 Products: WSO2 Identity Server as Key Manager, WSO2 Identity Server, WSO2 Open Banking IAM Description: An authentication bypass vulnerability exists in multiple WSO2 products when FIDO authentication is enabled. When a user account is deleted, the system does not automatically remove associated FIDO registration data. If a new user account is later created using the same username, the system may associate the new account with the previously registered FIDO device. This flaw may allow a previously
e, the system may associate the new account with the previously registered FIDO device. This flaw may allow a previously deleted user to authenticate using their FIDO credentials and impersonate the newly created user, resulting in unauthorized access. The vulnerability applies only to deployments that utilize FIDO-based authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-3134/
CVE ID: CVE-2025-0673 State: PUBLISHED Published: 2025-06-12T11:03:28.366Z Last Updated: 2025-06-12T13:16:12.190Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-835 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 17.7 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2, allow an attacker to trigger an infinite redirect loop, potentially leading to a denial of service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/514732 - https://hackerone.com/reports/2936949
CVE ID: CVE-2025-0674 State: PUBLISHED Published: 2025-02-06T23:42:33.517Z Last Updated: 2025-02-12T19:41:07.823Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Elber Products: Signum DVB-S/S2 IRD, Cleber/3 Broadcast Multi-Purpose Platform, Reble610 M/ODU XPIC IP-ASI-SDH, ESE DVB-S/S2 Satellite Receiver, Wayber Analog/Digital Audio STL Problem Types: CWE-288 Description: Multiple Elber products are affected by an authentication bypass vulnerability which allows unauthorized access to the password management functionality. Attackers can exploit this issue by manipulating the endpoint to overwrite any user's password within the system. This grants them unau
xploit this issue by manipulating the endpoint to overwrite any user's password within the system. This grants them unauthorized administrative access to protected areas of the application, compromising the device's system security. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-03
CVE ID: CVE-2025-0675 State: PUBLISHED Published: 2025-02-06T23:43:57.039Z Last Updated: 2025-02-12T19:41:07.552Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Elber Products: Signum DVB-S/S2 IRD, Cleber/3 Broadcast Multi-Purpose Platform, Reble610 M/ODU XPIC IP-ASI-SDH, ESE DVB-S/S2 Satellite Receiver, Wayber Analog/Digital Audio STL Problem Types: CWE-912 Description: Multiple Elber products suffer from an unauthenticated device configuration and client-side hidden functionality disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-03
CVE ID: CVE-2025-0676 State: PUBLISHED Published: 2025-04-02T06:32:27.898Z Last Updated: 2025-04-03T03:25:39.962Z Vendors: Moxa Products: EDF-G1002-BP Series, EDR-810 Series, EDR-8010 Series, EDR-G9004 Series, EDR-G9010 Series, OnCell G4302-LTE4 Series, TN-4900 Series, NAT-102 Series Problem Types: CWE-78 Description: This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privilege escalation, allowing the attacker to gain root shell access and maintain persistent control over the device, potentiall
escalation, allowing the attacker to gain root shell access and maintain persistent control over the device, potentially disrupting network services and affecting the availability of downstream systems that rely on its connectivity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-259491-cve-2025-0676-command-injection-leading-to-privilege-escalation
CVE ID: CVE-2025-0677 State: PUBLISHED Published: 2025-02-19T18:23:53.496Z Last Updated: 2025-11-06T23:18:58.295Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat OpenShift Container Platform 4 Problem Types: CWE-787 Description: A flaw was found in grub2. When performing a symlink lookup, the grub's UFS module checks the inode's data size to allocate the internal buffer to read the file content, however, it fails to check if the symlink data size has overflown. When this occurs, grub_malloc() may be called with a smaller
it fails to check if the symlink data size has overflown. When this occurs, grub_malloc() may be called with a smaller value than needed. When further reading the data from the disk into the buffer, the grub_ufs_lookup_symlink() function will write past the end of the allocated size. An attack can leverage this by crafting a malicious filesystem, and as a result, it will corrupt data stored in the heap, allowing for arbitrary code execution used to by-pass secure boot mechanisms. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:16154 - https://access.redhat.com/errata/RHSA-2025:6990 - https://access.redhat.com/security/cve/CVE-2025-
ata/RHSA-2025:16154 - https://access.redhat.com/errata/RHSA-2025:6990 - https://access.redhat.com/security/cve/CVE-2025-0677 - https://bugzilla.redhat.com/show_bug.cgi?id=2346116
CVE ID: CVE-2025-0678 State: PUBLISHED Published: 2025-03-03T17:05:41.928Z Last Updated: 2025-11-20T19:59:58.376Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-190 Description: A flaw was found in grub2. When reading data from a squash4 filesystem, grub's squash4 fs module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciously crafted filesystem may lead some of
nal buffer size, however, it improperly checks for integer overflows. A maliciously crafted filesystem may lead some of those buffer size calculations to overflow, causing it to perform a grub_malloc() operation with a smaller size than expected. As a result, the direct_read() will perform a heap based out-of-bounds write during data reading. This flaw may be leveraged to corrupt grub's internal critical data and may result in arbitrary code execution, by-passing secure boot protections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-0678 - https://bugzilla.redhat.com/show_bug.cgi?id=2346118
CVE ID: CVE-2025-0679 State: PUBLISHED Published: 2025-05-22T14:31:44.104Z Last Updated: 2025-05-22T14:46:00.223Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-359 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 17.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Under certain conditions un-authorised users can view full email addresses that should be partially obscured. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/514751 - https://hackerone.com/reports/2952536
CVE ID: CVE-2025-0680 State: PUBLISHED Published: 2025-01-30T18:50:10.932Z Last Updated: 2025-01-30T19:15:29.817Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: New Rock Technologies Products: OM500 IP-PBX, MX8G VoIP Gateway, NRP1302/P Desktop IP Phone Problem Types: CWE-78 Description: Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-02 - https://www.newrocktech.com/ContactUs/index.html
CVE ID: CVE-2025-0681 State: PUBLISHED Published: 2025-01-30T18:53:09.669Z Last Updated: 2025-01-30T19:11:58.156Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: New Rock Technologies Products: OM500 IP-PBX, MX8G VoIP Gateway, NRP1302/P Desktop IP Phone Problem Types: CWE-155 Description: The Cloud MQTT service of the affected products supports wildcard topic subscription which could allow an attacker to obtain sensitive information from tapping the service communications. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-02 - https://www.newrocktech.com/ContactUs/index.html
CVE ID: CVE-2025-0682 State: PUBLISHED Published: 2025-01-25T05:30:06.255Z Last Updated: 2025-02-12T20:41:32.063Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: ThemeREX Addons Problem Types: CWE-98 Description: The ThemeREX Addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.33.0 via the 'trx_sc_reviews' shortcode 'type' attribute. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensit
server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php file type can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/15a9718f-f877-4e33-8f7a-950791c4ca85?source=cve - https://themeforest.net/item/qwery-multipurpose-business-wordpress-theme/29678687
CVE ID: CVE-2025-0683 State: PUBLISHED Published: 2025-01-30T18:17:35.867Z Last Updated: 2025-02-12T20:41:36.789Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Contec Health Products: CMS8000 Patient Monitor Problem Types: CWE-359 Description: In its default configuration, Contec Health CMS8000 Patient Monitor transmits plain-text patient data to a hard-coded public IP address when a patient is hooked up to the monitor. This could lead to a leakage of confidential patient data to any device with that IP address or an attacker in a machine-in-the-middle scenario. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https
-in-the-middle scenario. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-030-01 - https://www.fda.gov/medical-devices/safety-communications/cybersecurity-vulnerabilities-certain-patient-monitors-contec-and-epsimed-fda-safety-communication
CVE ID: CVE-2025-0684 State: PUBLISHED Published: 2025-03-03T17:14:07.911Z Last Updated: 2025-11-20T20:00:05.132Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-787 Description: A flaw was found in grub2. When performing a symlink lookup from a reiserfs filesystem, grub's reiserfs fs module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciouly crafted filesystem
determine the internal buffer size, however, it improperly checks for integer overflows. A maliciouly crafted filesystem may lead some of those buffer size calculations to overflow, causing it to perform a grub_malloc() operation with a smaller size than expected. As a result, the grub_reiserfs_read_symlink() will call grub_reiserfs_read_real() with a overflown length parameter, leading to a heap based out-of-bounds write during data reading. This flaw may be leveraged to corrupt grub's internal critical data and can result in arbitrary code execution, by-passing secure boot protections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/C
t protections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-0684 - https://bugzilla.redhat.com/show_bug.cgi?id=2346119
CVE ID: CVE-2025-0685 State: PUBLISHED Published: 2025-03-03T17:14:23.575Z Last Updated: 2025-11-20T20:00:08.795Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-787 Description: A flaw was found in grub2. When reading data from a jfs filesystem, grub's jfs filesystem module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciouly crafted filesystem may lead some of
ernal buffer size, however, it improperly checks for integer overflows. A maliciouly crafted filesystem may lead some of those buffer size calculations to overflow, causing it to perform a grub_malloc() operation with a smaller size than expected. As a result, the grub_jfs_lookup_symlink() function will write past the internal buffer length during grub_jfs_read_file(). This issue can be leveraged to corrupt grub's internal critical data and may result in arbitrary code execution, by-passing secure boot protections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-0685 - https://bugzilla.redhat.com/show_bug.cgi?id=2346120
CVE ID: CVE-2025-0686 State: PUBLISHED Published: 2025-03-03T17:14:30.632Z Last Updated: 2025-11-20T20:00:08.161Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-787 Description: A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciously crafted filesys
o determine the internal buffer size, however, it improperly checks for integer overflows. A maliciously crafted filesystem may lead some of those buffer size calculations to overflow, causing it to perform a grub_malloc() operation with a smaller size than expected. As a result, the grub_romfs_read_symlink() may cause out-of-bounds writes when the calling grub_disk_read() function. This issue may be leveraged to corrupt grub's internal critical data and can result in arbitrary code execution by-passing secure boot protections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-0686 - https://bugzilla.redhat.com/show_bug.cgi?id=23
ent: References: - https://access.redhat.com/security/cve/CVE-2025-0686 - https://bugzilla.redhat.com/show_bug.cgi?id=2346121
CVE ID: CVE-2025-0687 State: PUBLISHED Published: 2025-05-15T20:07:25.468Z Last Updated: 2025-05-20T19:12:15.982Z Vendors: Unknown Products: Spiritual Gifts Survey (and optional S.H.A.P.E survey) Problem Types: CWE-79 Cross-Site Scripting (XSS), CWE-352 Cross-Site Request Forgery (CSRF) Description: The Spiritual Gifts Survey (and optional S.H.A.P.E survey) WordPress plugin through 0.9.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3c1e21e1-32f2-4a20-9262-80e1cd
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3c1e21e1-32f2-4a20-9262-80e1cdab534d/
CVE ID: CVE-2025-0688 State: PUBLISHED Published: 2025-05-15T20:07:25.673Z Last Updated: 2025-05-20T19:12:08.593Z Vendors: Unknown Products: Spiritual Gifts Survey (and optional S.H.A.P.E survey) Problem Types: CWE-79 Cross-Site Scripting (XSS), CWE-352 Cross-Site Request Forgery (CSRF) Description: The Spiritual Gifts Survey (and optional S.H.A.P.E survey) WordPress plugin through 0.9.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1e2b77c3-ad45-4734-998a-c1722e
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1e2b77c3-ad45-4734-998a-c1722ebd1f4f/
CVE ID: CVE-2025-0689 State: PUBLISHED Published: 2025-03-03T14:17:32.517Z Last Updated: 2025-11-20T20:00:14.587Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-120 Description: When reading data from disk, the grub's UDF filesystem module utilizes the user controlled data length metadata to allocate its internal buffers. In certain scenarios, while iterating through disk sectors, it assumes the read size from the disk is always smaller than the allocated buffer size whic
ating through disk sectors, it assumes the read size from the disk is always smaller than the allocated buffer size which is not guaranteed. A crafted filesystem image may lead to a heap-based buffer overflow resulting in critical data to be corrupted, resulting in the risk of arbitrary code execution by-passing secure boot protections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-0689 - https://bugzilla.redhat.com/show_bug.cgi?id=2346122 - https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
CVE ID: CVE-2025-0690 State: PUBLISHED Published: 2025-02-24T07:53:30.081Z Last Updated: 2025-11-24T19:53:30.214Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat OpenShift Container Platform 4 Problem Types: CWE-787 Description: The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character. During this process, with a line big enough it's possible to make this variable to ov