CVE-2025-4003

CVE-2025-4003 affects RefindPlus 0.14.2.AB. The vulnerability is in InternalApfsTranslateBlock of RP_ApfsIo.c and causes a null pointer dereference, enabling an attack on the local host. A patch named 4d35125ca689a255647e9033dd60c257d26df7cb exists and should be applied to remediate. Some sources...