OESA-2025-1218 grub2 security update

🗓️ 28 Feb 2025 15:34:28Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Grub2 security fixes for a JPEG out-of-bounds write, null pointer, language files overflows, and filesystem overflow.

Reporter	Title	Published	Views	Family All 796
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	5 Jun 202512:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	26 Apr 202514:56	–	ibm
GithubExploit	Exploit for CVE-2025-0690	4 May 202615:59	–	githubexploit
Tenable Nessus	Amazon Linux 2023 : grub2-common, grub2-efi-aa64, grub2-efi-aa64-cdboot (ALAS2023-2025-847)	26 Feb 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : grub2-common, grub2-efi-aa64, grub2-efi-aa64-cdboot (ALAS2023-2025-937)	14 Apr 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : grub2 (ALAS-2025-2756)	26 Feb 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : grub2 (ALAS-2025-2844)	30 Apr 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0049: grub2 (ALINUX3-SA-2025:0049)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 10 : grub2 (ALSA-2025:16154)	9 Oct 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : grub2 (ALSA-2025:20532)	19 Nov 202500:00	–	nessus

Source	Link
openeuler	www.openeuler.org/zh/security/security-bulletins/detail/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-45774
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-45775
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-45776
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-45777
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-45778
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-45779
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-45780
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-45781
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-45782

03 Sep 2025 06:20Current

8.4High risk

Vulners AI Score8.4

CVSS 3.17.8 - 8.8

EPSS0.00658

SSVC