CVE-2024-45782: Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-03-03 · updated 2026-10-21
Weakness: CWE-787

Description

A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer, impacting grub's sensitive data integrity and eventually leading to a secure boot protection bypass.

Affected products

grub2: through 2.12
Red Hat Enterprise Linux: 7.0, 8.0, 9.0
Red Hat OpenShift Container Platform 4.18: 4.0

References

https://access.redhat.com/security/cve/CVE-2024-45782
https://bugzilla.redhat.com/show_bug.cgi?id=2345858

Get alerted when CVE-2024-45782 or the next vulnerability affects your stack