CVE-2024-45779
MEDIUM
MEDIUM
Priority: 0.02
BB Relevance:
32/100
Published: 2025-03-03
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
Conf. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
High
UI:
None
S:
Unchanged
C:
High
I:
None
A:
High
Description
An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to validate the number of extent entries to be read. A crafted or corrupted BFS filesystem may cause an integer overflow during the file reading, leading to a heap of bounds read. As a consequence, sensitive data may be leaked, or grub2 will crash.
Weakness Classification (1)
References & Advisories (3)
vdb-entry
x_refsource_REDHAT
issue-tracking
x_refsource_REDHAT