SecuritySpace - CVE-2021-3697

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2021-3697

Description: A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerability can lead to data corruption and eventual code execution or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2021-3697
https://security.gentoo.org/glsa/202209-12
https://bugzilla.redhat.com/show_bug.cgi?id=1991687
https://bugzilla.redhat.com/show_bug.cgi?id=1991687

CVE ID:	CVE-2021-3697
Description:	A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerability can lead to data corruption and eventual code execution or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2021-3697 https://security.gentoo.org/glsa/202209-12 https://bugzilla.redhat.com/show_bug.cgi?id=1991687 https://bugzilla.redhat.com/show_bug.cgi?id=1991687