Logitech Options+ Vulnerability Allows Local Attacker to Abuse Camera Permissions

CVE-2024-8011

What is CVE-2024-8011?

Logitech Options+ on MacOS versions preceding 1.72 is susceptible to a local library injection flaw. This vulnerability enables a malicious local actor to inject a dynamic library into the Options+ runtime. The injected library can exploit permissions granted by the user, potentially allowing unauthorized access and manipulation of sensitive features, such as the Camera. Proper security measures and updates are recommended to mitigate the risks associated with this vulnerability.

References