CVE-2017-9763: The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2....

Security readout for executives and security teams

A crafted binary file can make vulnerable radare2 code crash by exhausting stack memory in an imported GNU GRUB ext2 parser. The documented impact is denial of service, not data theft or remote code execution. Business urgency is mainly for teams or services that process untrusted files with affected radare2 builds. Likely exposure is systems running radare2 1.5.0 or dependent workflows using that bundled GRUB ext2 parser on untrusted binary files. Internet exposure is not established by the supplied sources; practical risk depends on whether attacker-controlled files reach the vulnerable parser. Prioritize as a targeted reliability risk for file-analysis workflows, not a broad enterprise emergency. Patch or isolate affected radare2 use where untrusted files are processed automatically or by analysts. Mitigation focus: Identify and retire radare2 1.5.0 in analysis environments.; Update radare2 to a version containing commit 65000a7fd9eea62359e6d6714f17b94a99a82edd.; Check GNU GRUB guidance for the referenced 2013-11-12 ext2.c change..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.