PT-2025-1620
CVE-2024-11128
·
Published
2025-01-13
·
Updated
2025-01-14
Description by
CVSS 4.0
8.4
HighMetricsAV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
Name of the Vulnerable Software and Affected Versions
Bitdefender Virus Scanner versions prior to 3.18
Description
A vulnerability in the BitdefenderVirusScanner binary may allow dynamic library injection (DYLD injection) without being blocked by AppleMobileFileIntegrity (AMFI). This issue is caused by the absence of Hardened Runtime or Library Validation signing.
Recommendations
Update to version 3.18 to resolve the issue. As a temporary workaround, consider restricting the use of the BitdefenderVirusScanner binary until a patch is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾