https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:08:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-03840 bdu:2025-03840 https://cve.radiocsirt.org/vuln/bdu:2025-03840 https://cve.radiocsirt.org/vuln/bell-cve-2024-45782 <p><strong>Affected:</strong> Alpaquita:23: grub, Alpaquita:stream: grub</p> <p><strong>Affected:</strong> Alpaquita:23: grub, Alpaquita:stream: grub</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-45782 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1015 certfr-2025-avi-1015 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1015 https://cve.radiocsirt.org/vuln/cnvd-2025-08320 cnvd-2025-08320 https://cve.radiocsirt.org/vuln/cnvd-2025-08320 https://cve.radiocsirt.org/vuln/essa-2025:2835 <p>security update for grub2</p> <p>security update for grub2</p> https://cve.radiocsirt.org/vuln/essa-2025:2835 https://cve.radiocsirt.org/vuln/euvd-2026-331212 EUVD-2026-331212 https://cve.radiocsirt.org/vuln/euvd-2026-331212 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45782 <p>A flaw was found in the HFS filesystem. When reading an HFS volume&#39;s name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name&#39;s length. This issue may read to a heap-based out-of-bounds writer, impacting grub&#39;s sensitive data integrity and eventually leading to a secure boot protection bypass.</p> <p>A flaw was found in the HFS filesystem. When reading an HFS volume&#39;s name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name&#39;s length. This issue may read to a heap-based out-of-bounds writer, impacting grub&#39;s sensitive data integrity and eventually leading to a secure boot protection bypass.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45782 https://cve.radiocsirt.org/vuln/ghsa-pgf7-qmfm-349p <p>A flaw was found in the HFS filesystem. When reading an HFS volume&#39;s name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name&#39;s length. This issue may read to a heap-based out-of-bounds writer, impacting grub&#39;s sensitive data integrity and eventually leading to a secure boot protection bypass.</p> <p>A flaw was found in the HFS filesystem. When reading an HFS volume&#39;s name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name&#39;s length. This issue may read to a heap-based out-of-bounds writer, impacting grub&#39;s sensitive data integrity and eventually leading to a secure boot protection bypass.</p> https://cve.radiocsirt.org/vuln/ghsa-pgf7-qmfm-349p https://cve.radiocsirt.org/vuln/msrc_cve-2024-45782 msrc_CVE-2024-45782 https://cve.radiocsirt.org/vuln/msrc_cve-2024-45782 https://cve.radiocsirt.org/vuln/oesa-2025-1216 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: grub2</p> <p>GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fix(es):</p> <p>A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.(CVE-2024-45774)</p> <p>A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub&amp;apos;s argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading grub to crash or, in some rare scenarios, corrupt the IVT data.(CVE-2024-45775)</p> <p>When reading the language .mo file in grub_mofile_open(), grub2 fails to verify an integer overflow when allocating its internal buffer. A crafted .mo file may lead the buffer size calculation to overflow, leading to out-of-bound reads and writes. This flaw allows an attacker to leak sensitive data or overwrite critical data, possibly circumventing secure boot protections.(CVE-2024-45776)</p> <p>A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position() may overflow, leading to a Out-of-bound write. This issue can be leveraged by…</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: grub2</p> <p>GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fix(es):</p> <p>A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting in an out-of-bounds write. The possibility of overwriting sensitive information to bypass secure boot protections is not discarded.(CVE-2024-45774)</p> <p>A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub&amp;apos;s argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL point will be processed by the parse_option() function, leading grub to crash or, in some rare scenarios, corrupt the IVT data.(CVE-2024-45775)</p> <p>When reading the language .mo file in grub_mofile_open(), grub2 fails to verify an integer overflow when allocating its internal buffer. A crafted .mo file may lead the buffer size calculation to overflow, leading to out-of-bound reads and writes. This flaw allows an attacker to leak sensitive data or overwrite critical data, possibly circumventing secure boot protections.(CVE-2024-45776)</p> <p>A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position() may overflow, leading to a Out-of-bound write. This issue can be leveraged by…</p> https://cve.radiocsirt.org/vuln/oesa-2025-1216 https://cve.radiocsirt.org/vuln/suse-su-2025:01961-1 <p>Security update for grub2</p> <p>Security update for grub2</p> https://cve.radiocsirt.org/vuln/suse-su-2025:01961-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-45782 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: grub2, Ubuntu:Pro:14.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-unsigned, Ubuntu:18.04:LTS: grub2-signed, Ubuntu:18.04:LTS: grub2-unsigned, Ubuntu:20.04:LTS: grub2-signed, Ubuntu:20.04:LTS: grub2-unsigned, Ubuntu:22.04:LTS: grub2-signed, Ubuntu:22.04:LTS: grub2-unsigned and 6 more</p> <p>A flaw was found in the HFS filesystem. When reading an HFS volume&#39;s name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name&#39;s length. This issue may read to a heap-based out-of-bounds writer, impacting grub&#39;s sensitive data integrity and eventually leading to a secure boot protection bypass.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: grub2, Ubuntu:Pro:14.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-unsigned, Ubuntu:18.04:LTS: grub2-signed, Ubuntu:18.04:LTS: grub2-unsigned, Ubuntu:20.04:LTS: grub2-signed, Ubuntu:20.04:LTS: grub2-unsigned, Ubuntu:22.04:LTS: grub2-signed, Ubuntu:22.04:LTS: grub2-unsigned and 6 more</p> <p>A flaw was found in the HFS filesystem. When reading an HFS volume&#39;s name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name&#39;s length. This issue may read to a heap-based out-of-bounds writer, impacting grub&#39;s sensitive data integrity and eventually leading to a secure boot protection bypass.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-45782 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0396 <p>Ein Angreifer kann mehrere Schwachstellen in Grub ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen preiszugeben oder nicht spezifizierte Auswirkungen zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Grub ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen preiszugeben oder nicht spezifizierte Auswirkungen zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0396