CVE-2025-61661

MEDIUM

MEDIUM Priority: 0.01 BB Relevance: 35/100

Published: 2025-11-18 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

No Auth No Interaction

CVSS Vector Breakdown

AV: Physical

AC: High

PR: None

UI: None

S: Unchanged

C: None

I: Low

A: High

Description

A vulnerability has been identified in the GRUB (Grand Unified Bootloader) component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a maliciously configured USB device during the boot sequence to trigger this issue. A successful exploitation may lead GRUB to crash, leading to a Denial of Service. Data corruption may be also possible, although given the complexity of the exploit the impact is most likely limited.