Heap Overflow Vulnerability in GRUB2 Affects Linux Systems

CVE-2024-45780

Summary

A vulnerability has been identified in GRUB2 where a flaw in the handling of tar file reading can lead to improper allocation verification. This oversight creates an opportunity for an attacker to craft a malicious tar file, potentially resulting in an overflow of the allocation length. Such an exploitation can result in heap out-of-bounds writes, which may allow the attacker to bypass the secure boot mechanism, thereby compromising system integrity.

References