gnu grub CVE-2021-3695 vulnerability in GNU and Other Products
Published on July 6, 2022

product logo product logo product logo product logo product logo
A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an attacker needs to perform some triage over the heap layout to achieve signifcant results, also the values written into the memory are repeated three times in a row making difficult to produce valid payloads. This flaw affects grub2 versions prior grub-2.12.

Vendor Advisory NVD

Weakness Type

What is a Memory Corruption Vulnerability?

The software writes data past the end, or before the beginning, of the intended buffer. Typically, this can result in corruption of data, a crash, or code execution. The software may modify an index or perform pointer arithmetic that references a memory location that is outside of the boundaries of the buffer. A subsequent write operation then produces undefined or unexpected results.

CVE-2021-3695 has been classified to as a Memory Corruption vulnerability or weakness.


Products Associated with CVE-2021-3695

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-3695 are published in these products:

GNU Grub
 
Fedora Project Fedora
 
Red Hat Openshift
 
Red Hat Enterprise Linux (RHEL)
 
Red Hat Developer Tools
 
Red Hat Enterprise Linux Eus
 
Red Hat Enterprise Linux Server Tus
 
Red Hat Enterprise Linux Server Aus
 
Red Hat Enterprise Linux Power Little Endian
 
Red Hat Enterprise Linux Power Little Endian Eus
 
Red Hat Enterprise Linux Server Power Little Endian Update Services Sap Solutions
 
NetApp Ontap Select Deploy Administration Utility
 
Canonical Ubuntu Linux
 
GNU Grub2
 

Exploit Probability

EPSS
0.06%
Percentile
18.61%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.