CVE-2024-45774
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A flaw in grub2 allows an attacker to cause an out-of-bounds write by providing a specially crafted JPEG file to the JPEG parser. This can lead to memory corruption.
Risk Assessment
Successful exploitation could allow overwriting sensitive information, potentially bypassing Secure Boot protections and compromising the system boot process.
Recommendation
Update GRUB2 to the latest patched version immediately. Until then, avoid using custom JPEG images in GRUB configuration.
Original NVD description (English source)
A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.