Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-0690 — Technical analysis of CVE-2025-0690: integer overflow in GRUB2's read command leading to heap out-of-bounds write, arbitrary code execution, and Secure Boot bypass. Includes root cause, CVSS metrics, and vendor patch guidance. | Kitploit
Tools/GitHubGitHub/kaleth4/cve-2025-0690
Embedded Systems SecurityVulnerability AnalysisExploitationLearning & EducationFirmware AnalysisBinary Exploitation
GitHubkaleth4/cve-2025-0690

CVE-2025-0690

Technical analysis of CVE-2025-0690: integer overflow in GRUB2's read command leading to heap out-of-bounds write, arbitrary code execution, and Secure Boot bypass. Includes root cause, CVSS metrics, and vendor patch guidance.

View Repository
104 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-0690: Integer Overflow Vulnerability in GRUB2

🛡️ Overview

CVE-2025-0690 is a critical integer overflow vulnerability in the GRUB2 boot loader, allowing arbitrary code execution and Secure Boot bypass. This flaw affects systems that rely on GRUB2 for secure boot, exposing the system before the operating system starts.

🔍 Technical Details

Root Cause

  • Vulnerable command: read (used to receive keyboard input).
  • Issue: Input length is stored in a 32-bit integer.
  • Exploitation Mechanism:
    • Enter an extremely long line of text.
    • Causes an overflow in the length variable.
    • This leads to an out-of-bounds write in a heap-based buffer.

Consequences

  • Corruption of critical internal data of GRUB2.
  • Secure Boot bypass, allowing loading of malicious kernels.
  • System compromise before the OS starts.

📊 Security Metrics (CVSS v3.1)

MetricValueDescription
Base Score6.1 (Moderate)According to CISA-ADP and Red Hat.
Attack VectorPhysical (AV:P)Requires physical or local access.
ComplexityLow (AC:L)Easy to exploit with controlled input.
Privileges RequiredHigh (PR:H)Requires prior access to the system.
User InteractionRequired (UI:R)The attacker must interact with the system.

🛠️ Solutions and Mitigation

Available Updates

Several vendors have released patches to fix this vulnerability:

Distribution/VendorFixed VersionReference
Red Hatgrub2-2.06-104.el9_6+RHSA-2025:6990
Debiangrub2-2.12-6 (unstable)Security Bug Tracker
Oracle LinuxErrata ELSA-2025-6990-
DellUpdates on products such as PowerProtect and VxRail-

Recommendations

  1. Update GRUB2 and dependencies:
    • Use your distribution's package manager: 
      sudo dnf update grub2 grub2-common grub2-efi  # RHEL/Fedora
sudo apt upgrade grub2 grub2-common grub2-efi # Debian/Ubuntu
  2. Verify the installed version: 
    grub-install --version
  3. Reboot the system after the update.

📌 Additional Notes

  • CWE-787: Vulnerability classification as out-of-bounds write.
  • Publication Date: 24/02/2025.
  • Last Modification: 15/04/2026.

🔗 Official References

  • Red Hat Security Advisory (RHSA-2025:6990)
  • CVE-2025-0690 at Red Hat
  • Red Hat Bugzilla #2346123
  • GRUB2 Mailing List
Kaleth Pwned!!
Download Tool