CVE-2024-45780
CVSS 3.1 Score 6.7 of 10 (medium)
Details
Published Mar 3, 2025
Updated: Mar 7, 2025
CWE ID 787
Summary
CVE-2024-45780 is a vulnerability affecting grub2, a popular bootloader used in Linux systems. The issue arises when grub2 fails to adequately verify the allocation length while reading tar files, resulting in an integer overflow. A specially crafted tar file can trigger this vulnerability, leading to a heap out-of-bounds write. This defect puts secure boot protections at risk, allowing attackers to bypass these security measures.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Gnu Grub2
Affected Vendors
- GNU