Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f5v2-rhg6-jmg7

Опубликовано: 18 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.

A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.

EPSS

Процентиль: 18%
0.00057
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 6.7
ubuntu
9 месяцев назад

A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.

CVSS3: 6.7
redhat
9 месяцев назад

A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.

CVSS3: 6.7
nvd
9 месяцев назад

A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.

CVSS3: 6.7
msrc
2 месяца назад

Grub2: reader/jpeg: heap oob write during jpeg parsing

CVSS3: 6.7
debian
9 месяцев назад

A flaw was found in grub2. A specially crafted JPEG file can cause the ...

EPSS

Процентиль: 18%
0.00057
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-787