CVE-2024-45776

Summary

CVE-2024-45776 is a vulnerability affecting the grub2 utility in certain Linux distributions. The issue lies in the function grub_mofile_open(), which fails to verify an integer overflow when handling .mo files. A maliciously crafted .mo file can manipulate the buffer size calculation, resulting in out-of-bound reads and writes. This vulnerability could potentially allow an attacker to leak sensitive information or overwrite critical data, potentially circumventing secure boot protections.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.