CVE-2024-56737

GNU GRUB version 2.12 and earlier has a memory overflow vulnerability in its HFS filesystem handler. An attacker can crash or potentially take control of the boot process by creating a malicious HFS disk with specially crafted data.

Heap-based buffer overflow in fs/hfs.c triggered during parsing of superblock data in HFS filesystems. Attack vector requires local access to craft malicious HFS media; impact includes denial of service and potential code execution at boot-time privilege level.