CVE-2025-4002

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Apr 28, 2025
Updated: Apr 29, 2025
CWE ID 404
CWE ID 476

Summary

CVE-2025-4002 is a vulnerability affecting RefindPlusRepo RefindPlus 0.14.2.AB. Specifically, the function GetDebugLogFile in the file Library/MemLogLib/BootLog.c contains a null pointer dereference issue. This flaw can only be exploited through local access. A patch, identified as d2143a1e2deefddd9b105fb7160763c4f8d47ea2, has been released to address this vulnerability, and it is strongly recommended that affected systems be updated to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share