GRUB2 Out-of-Bound Write Vulnerability in gettext Translation Buffer Handling

A vulnerability in GRUB2 has been identified, where an integer overflow in the translation buffer calculation when reading a language .mo file can lead to an out-of-bounds write. This flaw allows an attacker to overwrite sensitive heap data in GRUB2, potentially bypassing secure boot protections.

Impact

Exploitation of this vulnerability could allow an attacker to manipulate GRUB2's heap memory, leading to a memory corruption scenario that could be used to bypass secure boot security measures.