CVE-2024-56737
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Dec 29, 2024
Updated: Dec 31, 2024
CWE ID 122
Summary
CVE-2024-56737 is a newly disclosed vulnerability affecting GNU GRUB, also known as GRUB2, up to version 2.12. This issue involves a heap-based buffer overflow found in the fs/hfs.c module while processing crafted sblock data in an HFS filesystem. Exploitation of this vulnerability could potentially lead to arbitrary code execution, allowing attackers to gain unauthorized access or control over affected systems. Users are advised to apply the necessary patches or updates to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- GNU