Out-of-Bounds Write Vulnerability in Grub2 Affects Red Hat Products
CVE-2024-45774
6.7MEDIUM
Summary
A vulnerability exists in the Grub2 bootloader, where a specially crafted JPEG file can exploit the JPEG parser, leading to improper boundary checks on internal buffers. This flaw can allow for out-of-bounds write actions, potentially enabling an attacker to overwrite sensitive data. While the direct impact on secure boot protections requires further analysis, the risk of unauthorized access to critical information poses a significant concern for users relying on Grub2 in their systems.
References
CVSS V3.1
Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved