Out-of-Bound Write Vulnerability in Grub2 by Red Hat

CVE-2024-45777

Summary

A flaw in Grub2 affects the calculation of the translation buffer when processing language .mo files. Specifically, the issue arises in the grub_gettext_getstr_from_position() function, which may lead to an out-of-bound write scenario. This vulnerability allows attackers to manipulate Grub2’s sensitive heap data, posing a risk of circumventing secure boot protections. The potential exploitation of this vulnerability necessitates immediate attention from users to safeguard against unauthorized access and system compromise.

References