ext2 Group Descriptor Allocation Integer Overflow

Intel Slim Bootloader's ext2 reader calculated the group descriptor table allocation size from filesystem-controlled values without checking for integer overflow. On affected 32-bit builds, a crafted ext2 filesystem could cause an undersized heap allocation followed by out-of-bounds descriptor writes in the pre-OS boot environment, potentially enabling local privilege escalation or code execution. Intel fixed the issue in commit 193129e6a1ea675527670785c8c75ed09b423211.