Persistent Denial of Service Vulnerability in FireEye EDR Agent by Trellix

CVE-2025-0618

What is CVE-2025-0618?

The FireEye EDR Agent is susceptible to a persistent denial of service vulnerability, enabling a malicious actor to send a crafted tamper protection event to the HX service. This action can trigger an exception that halts the processing of subsequent tamper protection events indefinitely, even across system reboots. This vulnerability underscores the critical need for robust monitoring and timely updates to maintain system integrity and operational continuity.

References