PT-2025-1620
CVE-2024-11128
·
Publicado
2025-01-13
·
Atualizado
2025-01-14
Descrição por
CVSS 4.0
8.4
AltaMétricasAV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
Name of the Vulnerable Software and Affected Versions
Bitdefender Virus Scanner versions prior to 3.18
Description
A vulnerability in the BitdefenderVirusScanner binary may allow dynamic library injection (DYLD injection) without being blocked by AppleMobileFileIntegrity (AMFI). This issue is caused by the absence of Hardened Runtime or Library Validation signing.
Recommendations
Update to version 3.18 to resolve the issue. As a temporary workaround, consider restricting the use of the BitdefenderVirusScanner binary until a patch is applied.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾