CVE-2024-45779

An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to validate the number of extent entries to be read. A crafted or corrupted BFS filesystem may cause an integer overflow during the file reading, leading to a heap of bounds read. As a consequence, sensitive data may be leaked, or grub2 will crash.

• CWE-190
• CWE-190

• https://access.redhat.com/security/cve/CVE-2024-45779Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2345854Issue Tracking
• https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.htmlMailing List

Published

Mar 3, 2025

Last Modified

Jun 29, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-45773A use-after-free vulnerability involving upgradeToRocket req…7.5
• CVE-2024-45774A flaw was found in grub2. A specially crafted JPEG file can…6.7
• CVE-2024-45775A flaw was found in grub2 where the grub_extcmd_dispatcher()…5.2
• CVE-2024-45776When reading the language .mo file in grub_mofile_open(), gr…6.7
• CVE-2024-45777A flaw was found in grub2. The calculation of the translatio…6.7
• CVE-2024-45778A stack overflow flaw was found when reading a BFS file syst…5.5
• CVE-2024-4578This Advisory describes an issue that impacts Arista Wireles…8.4
• CVE-2024-45780A flaw was found in grub2. When reading tar files, grub2 all…6.7
• CVE-2024-45781A flaw was found in grub2. When reading a symbolic link's na…6.7
• CVE-2024-45782A flaw was found in the HFS filesystem. When reading an HFS …7.8
• CVE-2024-45783A flaw was found in grub2. When failing to mount an HFS+ gru…4.4
• CVE-2024-45784Apache Airflow versions before 2.10.3 contain a vulnerabilit…7.5