CVE-2024-45777
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
A flaw in grub2's calculation of the translation buffer when reading a .mo file in grub_gettext_getstr_from_position() may overflow, leading to an out-of-bounds write. An attacker can exploit this to overwrite sensitive heap data, ultimately bypassing Secure Boot protections.
Risk Assessment
The risk is that an attacker can bypass Secure Boot, allowing execution of unauthorized code during system startup, compromising the integrity and trust of the entire boot chain.
Recommendation
Immediately update grub2 packages to a patched version and re-sign and reinstall the updated bootloader on systems using Secure Boot.
Original NVD description (English source)
A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position() may overflow, leading to a Out-of-bound write. This issue can be leveraged by an attacker to overwrite grub2's sensitive heap data, eventually leading to the circumvention of secure boot protections.