Extra SOF0 marker in JPEG file may lead to a out-of-bounds write. An attacker may leverage this by crafting a malicious JPEG file, leading the grub's JPEG parser to fail the bounds checking in its internal buffer resulting in a out-of-bounds memory write. The possibility of overwriting sensitive information in order to bypass secure boot protections are not discarded.
https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2025:6990 https://access.redhat.com/errata/RHSA-2025:6990