tocsin

Debian/grub2: medium 4.5

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and

Action: Upgrade grub2 to 2.06-3 or later.

Affected

introducedfixedlast affected
02.06-3-

Fixed versions

2.06-3

Sources

published · modified · JSON