A vulnerability has been found in GNU grub2 and classified as critical. This vulnerability affects unknown code of the component romfs. The manipulation leads to out-of-bounds write.
This vulnerability was named CVE-2025-0686. An attack has to be approached locally. There is no exploit available.
