CVE-2024-45778

grub2: fs/bfs: Integer overflow in the BFS parser.

Loading…

Severity

Moderate

Red Hat Product Security

4.1

CVSS 3.1

Review impact separately from score.

Published · February 19, 2025

Updated · October 22, 2026

Description

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash.

Statement

Red Hat supported products are not affected by this vulnerability,as the grub2 versions as shipped with it does not include the BFS filesystem module.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.1
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-190 · Integer Overflow or Wraparound