Database/Firmware, BMC & network fabric
GRUB2 (JPEG parser): Out-of-bounds write in GRUB's JPEG parser from a crafted image
CVE-2024-45774Firmware, BMC & network fabriccurated
Impact
Out-of-bounds write in GRUB's JPEG parser from a crafted image; possible Secure Boot bypass — part of the 2024-2025 GRUB2 vulnerability wave (73 issues)
Who can reach it
Local, ESP write
What to do
Coordinated GRUB2 + shim + dbx rollout across every distro image in the fleet. The distro-by-distro fan-out is the real cost: a neocloud offering multiple guest images has to rebuild all of them
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.