CVE-2025-1125

CVE-2025-1125 is a critical vulnerability affecting GNU GRUB2, specifically within its HFS filesystem module. It stems from improper integer overflow checks when calculating buffer sizes from user-controlled HFS filesystem metadata, leading to heap buffer overflows. This flaw can result in arbitrary code execution, potentially bypassing Secure Boot protections. The vulnerability carries a CVSS score of 7.8 (High), indicating a local attack vector with low complexity, requiring user interaction (e.g., booting from a malicious HFS filesystem). Successful exploitation could lead to high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. While community discussion is limited, the vulnerability has garnered media attention, notably from BleepingComputer, highlighting Microsoft's use of AI in its discovery.