Grub2: net: out-of-bounds write in grub_net_search_config_file()
Priority LOW 38CWE-787Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- High
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.
Summary
A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using the grub_strcpy() function. During this step, it fails to consider the environment variable length when allocating the internal buffer, resulting in an out-of-bounds write. If correctly exploited, this issue may result in remote code execution through the same network segment grub is searching for the boot information, which can be used to by-pass secure boot protections.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01405 72nd percentileScored 2026-11-07
Fix Fixed Red Hat: 17 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | grub2 | up to 2.12 | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | — | 1:2.02-0.87.el7_9.15 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 1:2.02-162.el8_10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | — | 1:2.02-87.el8_2.13 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — | 1:2.02-99.el8_4.12 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | — | 1:2.02-99.el8_4.12 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | — | 1:2.02-99.el8_4.12 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | — | 1:2.02-123.el8_6.18 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service | — | 1:2.02-123.el8_6.18 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | — | 1:2.02-123.el8_6.18 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | — | 1:2.02-152.el8_8.2 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 1:2.06-94.el9_5 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | — | 1:2.06-27.el9_0.22 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | — | 1:2.06-61.el9_2.10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | — | 1:2.06-86.el9_4.2 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.12 | — | 412.86.202503310142-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | — | 413.92.202504070146-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | — | 414.92.202505141057-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | 415.92.202504282058-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | 416.94.202503252048-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | — | 417.94.202503241418-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | 418.94.202504021150-0 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | Not affected | CNA |
- grub2 Vendor— Affected up to 2.12 Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 1:2.02-0.87.el7_9.15 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 1:2.02-162.el8_10 Patch available CNA
- Red Hat Enterprise Linux 8.2 Advanced Update Support VendorRed Hat Affected — Fixed in 1:2.02-87.el8_2.13 Patch available CNA
- Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 1:2.02-99.el8_4.12 Patch available CNA
- Red Hat Enterprise Linux 8.4 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1:2.02-99.el8_4.12 Patch available CNA
- Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1:2.02-99.el8_4.12 Patch available CNA
- Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 1:2.02-123.el8_6.18 Patch available CNA
- Red Hat Enterprise Linux 8.6 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1:2.02-123.el8_6.18 Patch available CNA
- Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1:2.02-123.el8_6.18 Patch available CNA
- Red Hat Enterprise Linux 8.8 Extended Update Support VendorRed Hat Affected — Fixed in 1:2.02-152.el8_8.2 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 1:2.06-94.el9_5 Patch available CNA
- Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1:2.06-27.el9_0.22 Patch available CNA
- Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 1:2.06-61.el9_2.10 Patch available CNA
- Red Hat Enterprise Linux 9.4 Extended Update Support VendorRed Hat Affected — Fixed in 1:2.06-86.el9_4.2 Patch available CNA
- Red Hat OpenShift Container Platform 4.12 VendorRed Hat Affected — Fixed in 412.86.202503310142-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.13 VendorRed Hat Affected — Fixed in 413.92.202504070146-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.14 VendorRed Hat Affected — Fixed in 414.92.202505141057-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in 415.92.202504282058-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.16 VendorRed Hat Affected — Fixed in 416.94.202503252048-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.17 VendorRed Hat Affected — Fixed in 417.94.202503241418-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in 418.94.202504021150-0 Patch available CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
CPE names CNA · 26
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/o:redhat:rhel_els:7 | 7 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux:8::baseos | 8 | — | Red Hat |
| cpe:/o:redhat:rhel_aus:8.2::baseos | 8.2 | — | Red Hat |
| cpe:/o:redhat:rhel_aus:8.4::baseos | 8.4 | — | Red Hat |
| cpe:/o:redhat:rhel_e4s:8.4::baseos | 8.4 | — | Red Hat |
| cpe:/o:redhat:rhel_tus:8.4::baseos | 8.4 | — | Red Hat |
| cpe:/o:redhat:rhel_aus:8.6::baseos | 8.6 | — | Red Hat |
| cpe:/o:redhat:rhel_e4s:8.6::baseos | 8.6 | — | Red Hat |
| cpe:/o:redhat:rhel_tus:8.6::baseos | 8.6 | — | Red Hat |
| cpe:/o:redhat:rhel_eus:8.8::baseos | 8.8 | — | Red Hat |
- cpe:/o:redhat:rhel_els:7 Versions 7 — ·Red Hat
- cpe:/o:redhat:enterprise_linux:8::baseos Versions 8 — ·Red Hat
- cpe:/o:redhat:rhel_aus:8.2::baseos Versions 8.2 — ·Red Hat
- cpe:/o:redhat:rhel_aus:8.4::baseos Versions 8.4 — ·Red Hat
- cpe:/o:redhat:rhel_e4s:8.4::baseos Versions 8.4 — ·Red Hat
- cpe:/o:redhat:rhel_tus:8.4::baseos Versions 8.4 — ·Red Hat
- cpe:/o:redhat:rhel_aus:8.6::baseos Versions 8.6 — ·Red Hat
- cpe:/o:redhat:rhel_e4s:8.6::baseos Versions 8.6 — ·Red Hat
- cpe:/o:redhat:rhel_tus:8.6::baseos Versions 8.6 — ·Red Hat
- cpe:/o:redhat:rhel_eus:8.8::baseos Versions 8.8 — ·Red Hat
Show 16 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/o:redhat:enterprise_linux:9::baseos | 9 | — | Red Hat |
| cpe:/o:redhat:rhel_e4s:9.0::baseos | 9.0 | — | Red Hat |
| cpe:/o:redhat:rhel_eus:9.2::baseos | 9.2 | — | Red Hat |
| cpe:/o:redhat:rhel_eus:9.4::baseos | 9.4 | — | Red Hat |
| cpe:/a:redhat:openshift:4.12::el8 | 4.12 | — | Red Hat |
| cpe:/a:redhat:openshift:4.12::el9 | 4.12 | — | Red Hat |
| cpe:/a:redhat:openshift:4.13::el8 | 4.13 | — | Red Hat |
| cpe:/a:redhat:openshift:4.13::el9 | 4.13 | — | Red Hat |
| cpe:/a:redhat:openshift:4.14::el8 | 4.14 | — | Red Hat |
| cpe:/a:redhat:openshift:4.14::el9 | 4.14 | — | Red Hat |
| cpe:/a:redhat:openshift:4.15::el8 | 4.15 | — | Red Hat |
| cpe:/a:redhat:openshift:4.15::el9 | 4.15 | — | Red Hat |
| cpe:/a:redhat:openshift:4.16::el9 | 4.16 | — | Red Hat |
| cpe:/a:redhat:openshift:4.17::el9 | 4.17 | — | Red Hat |
| cpe:/a:redhat:openshift:4.18::el9 | 4.18 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:10 | 10 | — | Red Hat |
- cpe:/o:redhat:enterprise_linux:9::baseos Versions 9 — ·Red Hat
- cpe:/o:redhat:rhel_e4s:9.0::baseos Versions 9.0 — ·Red Hat
- cpe:/o:redhat:rhel_eus:9.2::baseos Versions 9.2 — ·Red Hat
- cpe:/o:redhat:rhel_eus:9.4::baseos Versions 9.4 — ·Red Hat
- cpe:/a:redhat:openshift:4.12::el8 Versions 4.12 — ·Red Hat
- cpe:/a:redhat:openshift:4.12::el9 Versions 4.12 — ·Red Hat
- cpe:/a:redhat:openshift:4.13::el8 Versions 4.13 — ·Red Hat
- cpe:/a:redhat:openshift:4.13::el9 Versions 4.13 — ·Red Hat
- cpe:/a:redhat:openshift:4.14::el8 Versions 4.14 — ·Red Hat
- cpe:/a:redhat:openshift:4.14::el9 Versions 4.14 — ·Red Hat
- cpe:/a:redhat:openshift:4.15::el8 Versions 4.15 — ·Red Hat
- cpe:/a:redhat:openshift:4.15::el9 Versions 4.15 — ·Red Hat
- cpe:/a:redhat:openshift:4.16::el9 Versions 4.16 — ·Red Hat
- cpe:/a:redhat:openshift:4.17::el9 Versions 4.17 — ·Red Hat
- cpe:/a:redhat:openshift:4.18::el9 Versions 4.18 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:10 Versions 10 — ·Red Hat
Remediation
Red Hat 17 advisories
- RHSA-2025:7702 Released 2025-05-21 · Red Hat rating ImportantOpenShift Container Platform 4.14.52 bug fix and security update
- Red Hat OpenShift Container Platform 4.14 openshift4/ose-agent-installer-node-agent-rhel9, openshift4/ose-agent-installer-orchestrator-rhel8, openshift4/ose-hypershift-rhel8 +1
- RHSA-2025:4422 Released 2025-05-08 · Red Hat rating ImportantOpenShift Container Platform 4.15.50 bug fix and security update
- Red Hat OpenShift Container Platform 4.15 openshift4/ose-agent-installer-node-agent-rhel9, openshift4/ose-agent-installer-orchestrator-rhel8, openshift4/ose-baremetal-rhel9-operator +4
- RHSA-2025:3780 Released 2025-04-17 · Red Hat rating ImportantOpenShift Container Platform 4.13.57 bug fix and security update
- Red Hat OpenShift Container Platform 4.13 rhcos
Show 14 more Red Hat advisories
- RHSA-2025:3573 Released 2025-04-10 · Red Hat rating ImportantOpenShift Container Platform 4.12.75 packages and security update
- Red Hat OpenShift Container Platform 4.12 openshift4/network-tools-rhel8, openshift4/ose-agent-installer-node-agent-rhel8, openshift4/ose-docker-builder +5
- RHSA-2025:3577 Released 2025-04-10 · Red Hat rating ImportantOpenShift Container Platform 4.18.8 bug fix and security update
- Red Hat OpenShift Container Platform 4.18 openshift4/ose-aws-cluster-api-controllers-rhel9, openshift4/ose-azure-workload-identity-webhook-rhel9, openshift4/ose-cloud-credential-rhel9-operator +1
- RHSA-2025:3297 Released 2025-04-03 · Red Hat rating ImportantOpenShift Container Platform 4.17.23 bug fix and security update
- Red Hat OpenShift Container Platform 4.17 rhcos
- RHSA-2025:3301 Released 2025-04-03 · Red Hat rating ImportantOpenShift Container Platform 4.16.38 bug fix and security update
- Red Hat OpenShift Container Platform 4.16 openshift4/ose-agent-installer-api-server-rhel9, openshift4/ose-aws-pod-identity-webhook-rhel9, openshift4/ose-azure-workload-identity-webhook-rhel9 +3
- RHSA-2025:3396 Released 2025-03-31 · Red Hat rating Importantgrub2 security update
- Red Hat Enterprise Linux Server (v. 7 ELS) grub2-1:2.02-0.87.el7_9.15, grub2-common-1:2.02-0.87.el7_9.15, grub2-efi-ia32-1:2.02-0.87.el7_9.15 +12
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) grub2-efi-ia32-cdboot-1:2.02-0.87.el7_9.15, grub2-efi-ia32-modules-1:2.02-0.87.el7_9.15, grub2-efi-x64-cdboot-1:2.02-0.87.el7_9.15 +5
- RHSA-2025:3367 Released 2025-03-27 · Red Hat rating Importantgrub2 security update
- Red Hat Enterprise Linux BaseOS (v. 8) grub2-1:2.02-162.el8_10, grub2-common-1:2.02-162.el8_10, grub2-efi-aa64-1:2.02-162.el8_10 +16
- RHSA-2025:2869 Released 2025-03-17 · Red Hat rating Importantgrub2 security update
- Red Hat Enterprise Linux BaseOS EUS (v.9.2) grub2-1:2.06-61.el9_2.10, grub2-common-1:2.06-61.el9_2.10, grub2-efi-aa64-1:2.06-61.el9_2.10 +13
- RHSA-2025:2867 Released 2025-03-17 · Red Hat rating Importantgrub2 security update
- Red Hat Enterprise Linux BaseOS (v. 9) grub2-1:2.06-94.el9_5, grub2-common-1:2.06-94.el9_5, grub2-efi-aa64-1:2.06-94.el9_5 +13
- RHSA-2025:2799 Released 2025-03-13 · Red Hat rating Importantgrub2 security update
- Red Hat Enterprise Linux BaseOS E4S (v.9.0) grub2-1:2.06-27.el9_0.22, grub2-common-1:2.06-27.el9_0.22, grub2-efi-aa64-1:2.06-27.el9_0.22 +13
- RHSA-2025:2784 Released 2025-03-13 · Red Hat rating Importantgrub2 security update
- Red Hat Enterprise Linux BaseOS AUS (v. 8.2) grub2-1:2.02-87.el8_2.13, grub2-common-1:2.02-87.el8_2.13, grub2-efi-aa64-modules-1:2.02-87.el8_2.13 +13
- RHSA-2025:2675 Released 2025-03-12 · Red Hat rating Importantgrub2 security update
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) grub2-1:2.06-86.el9_4.2, grub2-common-1:2.06-86.el9_4.2, grub2-efi-aa64-1:2.06-86.el9_4.2 +13
- RHSA-2025:2655 Released 2025-03-11 · Red Hat rating Importantgrub2 security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) grub2-1:2.02-99.el8_4.12, grub2-common-1:2.02-99.el8_4.12, grub2-efi-aa64-modules-1:2.02-99.el8_4.12 +13
- Red Hat Enterprise Linux BaseOS E4S (v.8.4) grub2-1:2.02-99.el8_4.12, grub2-common-1:2.02-99.el8_4.12, grub2-efi-aa64-modules-1:2.02-99.el8_4.12 +14
- Red Hat Enterprise Linux BaseOS TUS (v.8.4) grub2-1:2.02-99.el8_4.12, grub2-common-1:2.02-99.el8_4.12, grub2-efi-aa64-modules-1:2.02-99.el8_4.12 +13
- RHSA-2025:2653 Released 2025-03-11 · Red Hat rating Importantgrub2 security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) grub2-1:2.02-123.el8_6.18, grub2-common-1:2.02-123.el8_6.18, grub2-efi-aa64-modules-1:2.02-123.el8_6.18 +13
- Red Hat Enterprise Linux BaseOS E4S (v.8.6) grub2-1:2.02-123.el8_6.18, grub2-common-1:2.02-123.el8_6.18, grub2-efi-aa64-1:2.02-123.el8_6.18 +16
- Red Hat Enterprise Linux BaseOS TUS (v.8.6) grub2-1:2.02-123.el8_6.18, grub2-common-1:2.02-123.el8_6.18, grub2-efi-aa64-modules-1:2.02-123.el8_6.18 +13
- RHSA-2025:2521 Released 2025-03-10 · Red Hat rating Importantgrub2 security update
- Red Hat Enterprise Linux BaseOS EUS (v.8.8) grub2-1:2.02-152.el8_8.2, grub2-common-1:2.02-152.el8_8.2, grub2-efi-aa64-1:2.02-152.el8_8.2 +16
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2025:3367 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2025:2867 |
| Red Hat Enterprise Linux BaseOS AUS (v. 8.2) | Fixed | RHSA-2025:2784 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.4) | Fixed | RHSA-2025:2655 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.6) | Fixed | RHSA-2025:2653 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.4) | Fixed | RHSA-2025:2655 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.6) | Fixed | RHSA-2025:2653 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.0) | Fixed | RHSA-2025:2799 |
| Red Hat Enterprise Linux BaseOS EUS (v.8.8) | Fixed | RHSA-2025:2521 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.2) | Fixed | RHSA-2025:2869 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.4) | Fixed | RHSA-2025:2675 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.4) | Fixed | RHSA-2025:2655 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.6) | Fixed | RHSA-2025:2653 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2025:3396 |
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Fixed | RHSA-2025:3396 |
| Red Hat OpenShift Container Platform 4.12 | Fixed | RHSA-2025:3573 |
| Red Hat OpenShift Container Platform 4.13 | Fixed | RHSA-2025:3780 |
| Red Hat OpenShift Container Platform 4.14 | Fixed | RHSA-2025:7702 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | RHSA-2025:4422 |
| Red Hat OpenShift Container Platform 4.16 | Fixed | RHSA-2025:3301 |
| Red Hat OpenShift Container Platform 4.17 | Fixed | RHSA-2025:3297 |
| Red Hat OpenShift Container Platform 4.18 | Fixed | RHSA-2025:3577 |
Not affected: 8 products
- Red Hat Enterprise Linux 10
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Red Hat OpenShift Container Platform 4.16
- Red Hat OpenShift Container Platform 4.17
- Red Hat OpenShift Container Platform 4.18
Timeline
- 2026-10-02 Threatist record created from CVE-2025-0624
- 2026-10-03 Alias added: GHSA-q3rr-g46f-jgqr
- 2026-10-13 Fix available: openshift/[email protected], openshift/[email protected], openshift/[email protected] +4 · CNA
- 2026-10-13 Affected versions changed · Red Hat
- 2026-11-04 Fix available: RHSA-2025:4422 · Red Hat
- 2026-11-04 Fix available: RHSA-2025:7702 · Red Hat
References
Advisory 17
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2025-0624 · CVE Program
- CVE-2025-0624 · NVD
- FIRST EPSS
- GHSA-q3rr-g46f-jgqr · GitHub Advisory Database · CC BY 4.0
- CVE-2025-0624 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences