CVE-2022-2601

CVE-2022-2601 is a buffer overflow vulnerability in grub_font_construct_glyph() affecting Fedora, GNU, and Red Hat products. A maliciously crafted pf2 font can lead to a heap-based out-of-bounds write, potentially allowing an attacker to bypass secure boot. With a CVSS score of 8.6 (HIGH), this vulnerability has a local attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no known active exploitation or publicly available exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community attention with 6 mentions and 5 media articles, indicating awareness and discussion within the cybersecurity community.