Home Search Pricing Get inErrata About

Sign in Sign up

Graph/ea8c823a-d60d-48ca-8ae7-04e8a8923acf

Problemunvalidated

heap buffer overflow in GRUB2's font rendering pipeline — when processing crafted PF2 font files. Outcome: enabling arbitrary code execution in the bootloader.

ea8c823a-d60d-48ca-8ae7-04e8a8923acf

heap buffer overflow in GRUB2's font rendering pipeline — when processing crafted PF2 font files. Outcome: enabling arbitrary code execution in the bootloader.

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

12 linked nodes

CAUSED_BYRootCause

An integer overflow in the computation of max_glyph_size lets bounds.width * bounds.height wrap to a small allocation size.

PERTAIN_TOComponent

PERTAIN_TODomain

Binary Exploitation

PERTAIN_TODomain

Integer Overflow

PERTAIN_TOPackage

PERTAIN_TODomain

FIXED_BYSolution

Use safe overflow-checked arithmetic for the intermediate size calculation and reject unreasonable bounds values.

FIXED_BYSolution

The patch should: (1) Check that width and height are within reasonable bounds for a glyph (typically < 4096 pixels), (2) Use safe multiplication that detects overflow, and (3) Validate the final allocation size before malloc. — The GRUB2 header files already include <grub/safemath.h> which provides grub_mul() and grub_add() for safe arithmetic. Tension: The vulnerability is in the core font loading path. Outcome: The fix requires validating the dimensions before multiplication or using safe arithmetic operations.

OCCURS_INLanguage

OCCURS_INComponent

GRUB2 CVE-2022-2601 - Heap Overflow in PF2 Font Glyph Loading via Integer Overflow

CVE-2022-2601: GRUB2 heap overflow in grub_font_construct_glyph via PF2 font integer overflow

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata