CVE-2025-0678

CVE-2025-0678 is a critical vulnerability in grub2, affecting products like GNU and Red Hat Enterprise Linux and OpenShift Container Platform. This flaw allows an attacker to craft a malicious squash4 filesystem that exploits integer overflows in grub's buffer size calculations, leading to a heap-based out-of-bounds write. This can corrupt critical grub data and potentially enable arbitrary code execution, bypassing secure boot protections. With a CVSS score of 7.8 (High), this vulnerability has a local attack vector with low complexity, requiring low privileges and no user interaction. The potential impact is high for confidentiality, integrity, and availability. While not currently in the KEV catalog or Hot List, and with no public exploit code available (Metasploit, Nuclei, ExploitDB), its potential for bypassing secure boot makes it a significant concern. Community discussion and media coverage are limited, with only one mention and one article, respectively, though the article highlights Microsoft's use of AI to find such bootloader flaws. Despite the lack of active exploitation, the severe potential impact warrants attention, particularly given the foundational role of grub2 in system security.