CVE-2024-45774CWE-787

CVE-2024-45774

Medium · published February 19, 2025

CVSS v3.1
6.7
EPSS
0%
Percentile
18.3
In the wild
Unconfirmed
What it is

A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00271 · 18.3th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-02-19T00:15Z
References (4)
EPSS history
Timeline
  • 18 FEB 18:25Z
    Grub2: reader/jpeg: heap oob write during jpeg parsing
    cvelistv5