PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2021-3696

CVE-2021-3696

grub2: Crafted PNG image may lead to out-of-bound write during huffman table handling

Loading…

Severity

Moderate

Red Hat Product Security

5

CVSS 3.1

Review impact separately from score.

Published · June 7, 2022

Updated · November 22, 2025

Description

A flaw was found in grub2 when handling a PNG image header. When decoding the data contained in the Huffman table at the PNG file header, an out-of-bounds write may happen on grub's heap.

Statement

This vulnerability's impact on confidentiality, data integrity, and availability are considered low as a successful attack using this flaw is very complex.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

CWE-787 · Out-of-bounds Write