CVE-2024-45774

{"id": "CVE-2024-45774", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2025-02-18T19:15:16.387", "references": [{"url": "https://access.redhat.com/errata/RHSA-2025:6990", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2024-45774", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2337461", "source": "secalert@redhat.com"}, {"url": "https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html", "source": "secalert@redhat.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded."}, {"lang": "es", "value": "Se encontr\u00f3 un defecto en Grub2. Un archivo JPEG especialmente manipulado puede hacer que el sistema JPEG de Grub2 verifique incorrectamente los l\u00edmites de sus b\u00faferes internos, lo que resulta en una escritura fuera de los l\u00edmites. La posibilidad de sobrescribir informaci\u00f3n confidencial para evitar las protecciones seguras de arranque no se descarta."}], "lastModified": "2025-05-13T20:15:24.610", "sourceIdentifier": "secalert@redhat.com"}