Dynamic Library Injection Vulnerability in Bitdefender Virus Scanner for MacOS
CVE-2024-11128

7.8HIGH

Key Information:

Vendor

Bitdefender

Status
Bitdefender Virus Scanner for MacOS
Vendor
CVE Published:
13 January 2025

What is CVE-2024-11128?

A vulnerability in the Bitdefender Virus Scanner for MacOS allows attackers to perform dynamic library injection without detection by AppleMobileFileIntegrity (AMFI). This is attributed to the lack of Hardened Runtime or Library Validation signing in versions prior to 3.18. Exploitation of this vulnerability could lead to unauthorized code execution within the affected software environment.

References

https://www.bitdefender.com/support/security-advisories/i...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.
CVE-2024-11128 : Dynamic Library Injection Vulnerability in Bitdefender Virus Scanner for MacOS