CVE-2025-4002

MEDIUM Year: 2025
CVSS v3 Score
5.5
Medium
CVSS v2 Score
4.6
Medium
Weakness Type
CWE-404
View all →

Vulnerability Description

A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB and classified as problematic. Affected by this issue is the function GetDebugLogFile of the file Library/MemLogLib/BootLog.c. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The patch is identified as d2143a1e2deefddd9b105fb7160763c4f8d47ea2. It is recommended to apply a patch to fix this issue.

Related Vulnerabilities

CVE-2010-10001

MEDIUM
CVSS:5.5(Medium)

A vulnerability, which was classified as problematic, was found in Shemes GrabIt up to 1.7.2 Beta 4. This affects the component NZB Date Parser. The manipulation of the argument date with the input 10...

CWE-4042010

CVE-2015-10002

MEDIUM
CVSS:5.5(Medium)

A vulnerability classified as problematic has been found in Kiddoware Kids Place. This affects the Home Button Protection. A repeated pressing of the button causes a local denial of service. It is rec...

CWE-4042015

CVE-2016-15024

MEDIUM
CVSS:5.5(Medium)

A vulnerability was found in doomsider shadow. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. Attacking locally is a requirement. ...

CWE-4042016

CVE-2017-0733

MEDIUM
CVSS:5.5(Medium)

A denial of service vulnerability in the Android media framework (libmediaplayerservice). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38391487.

CWE-4042017

CVE-2017-20011

MEDIUM
CVSS:5.5(Medium)

A vulnerability was found in WEKA INTEREST Security Scanner 1.8. It has been rated as problematic. This issue affects some unknown processing of the component HTTP Handler. The manipulation with an un...

CWE-4042017

CVE-2017-20012

MEDIUM
CVSS:5.5(Medium)

A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stresstest Scheme Handler which leads to a denial of service. The attack needs to be a...

CWE-4042017