Unknown · Refindplus · CVE-2025-4002
**Name of the Vulnerable Software and Affected Versions**
RefindPlus versions 0.14.2.AB
**Description**
A vulnerability was found in RefindPlus, classified as problematic. The issue affects the `GetDebugLogFile` function of the file Library/MemLogLib/BootLog.c, leading to a null pointer dereference. Local attack is required to exploit this issue.
**Recommendations**
For version 0.14.2.AB, apply the patch identified as d2143a1e2deefddd9b105fb7160763c4f8d47ea2 to fix this issue. As a temporary workaround, consider disabling the `GetDebugLogFile` function until the patch is applied.