CVE-2025-4003 – Apache RefindPlus null pointer dereference vulnerability

April 28, 2025

CVE ID : CVE-2025-4003

Published : April 28, 2025, 6:15 a.m. | 2 hours, 13 minutes ago

Description : A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB. It has been classified as problematic. This affects the function InternalApfsTranslateBlock of the file Library/RP_ApfsLib/RP_ApfsIo.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The patch is named 4d35125ca689a255647e9033dd60c257d26df7cb. It is recommended to apply a patch to fix this issue.

Severity: 5.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-4004 – PHPGurukul COVID19 Testing Management System SQL Injection Vulnerability

Next Article CVE-2025-0627 – WordPress Tag, Category, and Taxonomy Manager Stored Cross-Site Scripting Vulnerability

Highlights

CVE-2025-4035 – Libsoup Cookie Domain Bypass Vulnerability

April 29, 2025

CVE ID : CVE-2025-4035

Published : April 29, 2025, 1:15 p.m. | 2 hours, 47 minutes ago

Description : A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set cookies for domains it does not own, potentially leading to integrity issues such as session fixation.

Severity: 4.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

The Ultimate Guide to Node.js Development Pricing for Enterprises

Stack Overflow: Developers’ trust in AI outputs is worsening year over year

Web Components: Working With Shadow DOM

Google’s new Opal tool allows users to create mini AI apps with no coding required

I replaced my Samsung OLED TV with this Sony Mini LED model for a week – and didn’t regret it

I tested the most popular robot mower on the market – and it was a $5,000 crash out

5 gadgets and accessories that leveled up my gaming setup (including a surprise console)

Why I’m patiently waiting for the Samsung Z Fold 8 next year (even though the foldable is already great)

Performance Analysis with Laravel’s Measurement Tools

Performance Analysis with Laravel’s Measurement Tools

Memoization and Function Caching with this PHP Package

Laracon US 2025 Livestream

Microsoft mysteriously offered a Windows 11 upgrade to this unsupported Windows 10 PC — despite it failing to meet the “non-negotiable” TPM 2.0 requirement

Microsoft mysteriously offered a Windows 11 upgrade to this unsupported Windows 10 PC — despite it failing to meet the “non-negotiable” TPM 2.0 requirement

With Windows 10’s fast-approaching demise, this Linux migration tool could let you ditch Microsoft’s ecosystem with your data and apps intact — but it’s limited to one distro

Windows 10 is 10 years old today — let’s look back at 10 controversial and defining moments in its history

CVE-2025-4003 – Apache RefindPlus null pointer dereference vulnerability

CISA Adds PaperCut NG/MF CSRF Vulnerability to KEV Catalog Amid Active Exploitation

Tea App Data Breach: 72,000 Selfies and IDs of Women Leaked Online

Alibaba Qwen Introduces Qwen3-MT: Next-Gen Multilingual Machine Translation Powered by Reinforcement Learning

Convert Eloquent Models to HLS Video

AIOps Unleashed: How AI is Revolutionizing IT Operations for the Digital Era🤖

Amazon EC2 SSM Agent Flaw Patched After Privilege Escalation via Path Traversal

CVE-2025-4035 – Libsoup Cookie Domain Bypass Vulnerability

CVE-2025-7094 – Belkin Webs Stack-Based Buffer Overflow Vulnerability

CVE-2025-31240 – Apple AFP Network Share Remote Code Execution Vulnerability

WineCharm – Wine GUI

CVE-2025-4003 – Apache RefindPlus null pointer dereference vulnerability

Related Posts