https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:16:05 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:6990 <p><strong>Affected:</strong> AlmaLinux:9: grub2-common, AlmaLinux:9: grub2-efi-aa64, AlmaLinux:9: grub2-efi-aa64-cdboot, AlmaLinux:9: grub2-efi-aa64-modules, AlmaLinux:9: grub2-efi-x64, AlmaLinux:9: grub2-efi-x64-cdboot, AlmaLinux:9: grub2-efi-x64-modules, AlmaLinux:9: grub2-pc, AlmaLinux:9: grub2-pc-modules, AlmaLinux:9: grub2-ppc64le and 5 more</p> <p>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.</p> <p>Security Fix(es):</p> <p>* grub2: reader/jpeg: Heap OOB Write during JPEG parsing (CVE-2024-45774) * grub2: commands/extcmd: Missing check for failed allocation (CVE-2024-45775) * grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. (CVE-2024-45776) * grub2: fs/ufs: OOB write in the heap (CVE-2024-45781) * grub2: fs/hfs+: refcount can be decremented twice (CVE-2024-45783) * grub2: command/gpg: Use-after-free due to hooks not being removed on module unload (CVE-2025-0622) * grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks (CVE-2025-0677) * grub2: read: Integer overflow may lead to out-of-bounds write (CVE-2025-0690)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: grub2-common, AlmaLinux:9: grub2-efi-aa64, AlmaLinux:9: grub2-efi-aa64-cdboot, AlmaLinux:9: grub2-efi-aa64-modules, AlmaLinux:9: grub2-efi-x64, AlmaLinux:9: grub2-efi-x64-cdboot, AlmaLinux:9: grub2-efi-x64-modules, AlmaLinux:9: grub2-pc, AlmaLinux:9: grub2-pc-modules, AlmaLinux:9: grub2-ppc64le and 5 more</p> <p>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.</p> <p>Security Fix(es):</p> <p>* grub2: reader/jpeg: Heap OOB Write during JPEG parsing (CVE-2024-45774) * grub2: commands/extcmd: Missing check for failed allocation (CVE-2024-45775) * grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. (CVE-2024-45776) * grub2: fs/ufs: OOB write in the heap (CVE-2024-45781) * grub2: fs/hfs+: refcount can be decremented twice (CVE-2024-45783) * grub2: command/gpg: Use-after-free due to hooks not being removed on module unload (CVE-2025-0622) * grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks (CVE-2025-0677) * grub2: read: Integer overflow may lead to out-of-bounds write (CVE-2025-0690)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:6990 https://cve.radiocsirt.org/vuln/bdu:2025-03839 bdu:2025-03839 https://cve.radiocsirt.org/vuln/bdu:2025-03839 https://cve.radiocsirt.org/vuln/bell-cve-2024-45774 <p><strong>Affected:</strong> Alpaquita:23: grub, Alpaquita:stream: grub</p> <p><strong>Affected:</strong> Alpaquita:23: grub, Alpaquita:stream: grub</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-45774 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0316 certfr-2026-avi-0316 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0316 https://cve.radiocsirt.org/vuln/cnvd-2025-19253 cnvd-2025-19253 https://cve.radiocsirt.org/vuln/cnvd-2025-19253 https://cve.radiocsirt.org/vuln/euvd-2026-331206 EUVD-2026-331206 https://cve.radiocsirt.org/vuln/euvd-2026-331206 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45774 <p>A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.</p> <p>A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45774 https://cve.radiocsirt.org/vuln/ghsa-f5v2-rhg6-jmg7 <p>A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.</p> <p>A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.</p> https://cve.radiocsirt.org/vuln/ghsa-f5v2-rhg6-jmg7 https://cve.radiocsirt.org/vuln/msrc_cve-2024-45774 msrc_CVE-2024-45774 https://cve.radiocsirt.org/vuln/msrc_cve-2024-45774 https://cve.radiocsirt.org/vuln/oesa-2025-1216 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: grub2</p> <p>GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fix(es):</p> <p>A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.(CVE-2024-45774)</p> <p>A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub&amp;apos;s argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading grub to crash or, in some rare scenarios, corrupt the IVT data.(CVE-2024-45775)</p> <p>When reading the language .mo file in grub_mofile_open(), grub2 fails to verify an integer overflow when allocating its internal buffer. A crafted .mo file may lead the buffer size calculation to overflow, leading to out-of-bound reads and writes. This flaw allows an attacker to leak sensitive data or overwrite critical data, possibly circumventing secure boot protections.(CVE-2024-45776)</p> <p>A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position() may overflow, leading to a Out-of-bound write. This issue can be leveraged by…</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: grub2</p> <p>GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fix(es):</p> <p>A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.(CVE-2024-45774)</p> <p>A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub&amp;apos;s argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading grub to crash or, in some rare scenarios, corrupt the IVT data.(CVE-2024-45775)</p> <p>When reading the language .mo file in grub_mofile_open(), grub2 fails to verify an integer overflow when allocating its internal buffer. A crafted .mo file may lead the buffer size calculation to overflow, leading to out-of-bound reads and writes. This flaw allows an attacker to leak sensitive data or overwrite critical data, possibly circumventing secure boot protections.(CVE-2024-45776)</p> <p>A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position() may overflow, leading to a Out-of-bound write. This issue can be leveraged by…</p> https://cve.radiocsirt.org/vuln/oesa-2025-1216 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14822-1 <p>grub2-2.12-35.1 on GA media</p> <p>grub2-2.12-35.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14822-1 https://cve.radiocsirt.org/vuln/suse-su-2025:01961-1 <p>Security update for grub2</p> <p>Security update for grub2</p> https://cve.radiocsirt.org/vuln/suse-su-2025:01961-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-45774 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: grub2, Ubuntu:Pro:14.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-unsigned, Ubuntu:18.04:LTS: grub2-signed, Ubuntu:18.04:LTS: grub2-unsigned, Ubuntu:20.04:LTS: grub2-signed, Ubuntu:20.04:LTS: grub2-unsigned, Ubuntu:22.04:LTS: grub2-signed, Ubuntu:22.04:LTS: grub2-unsigned and 6 more</p> <p>A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: grub2, Ubuntu:Pro:14.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-unsigned, Ubuntu:18.04:LTS: grub2-signed, Ubuntu:18.04:LTS: grub2-unsigned, Ubuntu:20.04:LTS: grub2-signed, Ubuntu:20.04:LTS: grub2-unsigned, Ubuntu:22.04:LTS: grub2-signed, Ubuntu:22.04:LTS: grub2-unsigned and 6 more</p> <p>A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-45774 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0396 <p>Ein Angreifer kann mehrere Schwachstellen in Grub ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen preiszugeben oder nicht spezifizierte Auswirkungen zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Grub ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen preiszugeben oder nicht spezifizierte Auswirkungen zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0396