Database/Firmware, BMC & network fabric
GRUB2 (UDF filesystem parser): Heap buffer overflow in grub_udf_read_block
CVSS 6.4CVE-2025-0689Firmware, BMC & network fabricGRUB2 2025 batchcurated
Impact
Heap buffer overflow in grub_udf_read_block. UDF is the optical/ISO filesystem, which is precisely what BMC virtual media presents - so this one is reachable by anyone with BMC credentials, not only by a local tenant.
Who can reach it
Crafted UDF/ISO image, including one mounted remotely through iDRAC/iLO/XCC virtual media.
What to do
grub2 package update + reboot. Disable BMC virtual media where you do not need it - that closes the most convenient remote path to this and several other parser bugs at once.
References
Related entries
- GRUB2 (read command): Integer overflow in the read command's accumulator writes out of boundsCVE-2025-0690 · GRUB2 (read command)Medium
- GRUB2 (HFS filesystem parser): Integer overflow computing internal buffer sizes from HFS metadata, leading to a heapCVE-2025-1125 · GRUB2 (HFS filesystem parser)Medium
- Dell OMSA: authenticated SSRF lets a low-privileged user reach systems behind the agentCVE-2026-81443 · Dell OpenManage Server Administrator (SSRF, authenticated)Medium
- GNU GRUB 2 (serial command MMIO base address validation): GRUB's `serial` command accepts an MMIO base address withoutCVE-2026-97876 · GNU GRUB 2 (serial command MMIO base address validation)Medium
- AMD processors - frequency scaling / power management: A remote or local attacker times operations and infers secretCVE-2022-23823 · AMD processors - frequency scaling / power managementMedium
- Intel processors - power management throttling: The Intel half of Hertzbleed: observable behaviour in power-managementCVE-2022-24436 · Intel processors - power management throttlingMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.