A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position() may overflow, leading to a Out-of-bound write. This issue can be leveraged by an attacker to overwrite grub2's sensitive heap data, eventually leading to the circumvention of secure boot protections.
CVE-2024-45777
CVSS base score
6.7 (v3.1)
Severity
MEDIUM
Attack vector
Local
Weakness
CWE-787
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
gnu grub2
redhat openshift
redhat enterprise linux
References
- access.redhat.com
- access.redhat.com Third Party Advisory
- bugzilla.redhat.com Issue Tracking, Third Party Advisory