{"id":"CVE-2025-0690","title":"The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character","summary":"The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character. During this process, wit…","severity":"medium","cvss":6.1,"cvssVector":"CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"published":"2025-02-24","updated":"2026-06-25","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-0690","references":[{"url":"https://access.redhat.com/errata/RHSA-2025:6990","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2025-0690","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2346123","label":"secalert@redhat.com"},{"url":"https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html","label":"secalert@redhat.com"}],"tags":["nvd","exploit-available"],"epss":0.00716,"epssPercentile":0.51904,"ingestedAt":"2026-06-29T13:24:34.164Z","exploits":{"github":1,"githubRepos":["https://github.com/kaleth4/CVE-2025-0690"],"checkedAt":"2026-09-21T15:27:07.195Z"},"exploitAvailable":true,"slug":"CVE-2025-0690","body":"## Overview\n\nThe read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character. During this process, with a line big enough it's possible to make this variable to overflow leading to a out-of-bounds write in the heap based buffer. This flaw may be leveraged to corrupt grub's internal critical data and secure boot bypass is not discarded as consequence.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":46,"depthScoreParts":{"impact":33.6,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":4777,"id":"CVE-2025-0690","ts":1788887205769,"field":"exploit_available","old":"false","new":"true"},{"seq":3660,"id":"CVE-2025-0690","ts":1788886322503,"field":"exploit_available","old":"true","new":"false"},{"seq":2511,"id":"CVE-2025-0690","ts":1788882990160,"field":"exploit_available","old":"false","new":"true"},{"seq":1540,"id":"CVE-2025-0690","ts":1788882403996,"field":"exploit_available","old":"true","new":"false"},{"seq":654,"id":"CVE-2025-0690","ts":1788881841538,"field":"exploit_available","old":"false","new":"true"}]}