CVE-2022-3775 Memory corruption in grub2
An attacker can trigger out-of-bounds writes in GRUB2 via crafted Unicode sequences, causing memory corruption, denial of service, or potential code execution.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-3775?
CVE-2022-3775 is a high-severity memory corruption vulnerability in Redhat Enterprise Linux, published on 19 Dec 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption and availability issues. Although complex, arbitrary code execution could not be discarded.
Weakness: CWE-787
Which versions are affected by CVE-2022-3775?
It affects 2 products.
Products include Gnu Grub2, Redhat Enterprise Linux.
How do I fix CVE-2022-3775?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-3775 being exploited?
There is no known exploitation of CVE-2022-3775 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Linux
- CVE-2024-56737 Memory corruption in GRUB2
- CVE-2022-28733 Integer underflow in grub_net_recv_ip4_packets
- CVE-2022-28734 Out-of-bounds write when handling split HTTP headers
- CVE-2025-61662 Grub2: missing unregister call for gettext command may lead to use-after-free
- CVE-2024-45782 Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)
Sources
Also known as AZL-12079, AZL-34792, DEBIAN-CVE-2022-3775, GHSA-8h84-vmjf-pcmj, UBUNTU-CVE-2022-3775.