CVE-2024-56737CWE-122

GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem

High · published December 29, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00724 · 53.6th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2024-12-29T00:00Z
EPSS history
Timeline
  • 29 DEC 00:00Z
    GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem
    cvelistv5