There's an integer overflow in the BFS file system driver. When reading a file with indirect extent map 
grub2 fails to validate the number of extent entries to be read. A crafted or corrupted BFS filesystem
may cause a integer overflow during the file reading, leading to a Heap Ouf-of-Bounds read. As consequence
sensitive data may be leaked or the grub2 to crash.