Security Advisory

CVE-2024-11128

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-01-13 21:49:30
Last updated 2025-01-14 00:17:56
Assigner Bitdefender
State PUBLISHED

Description

A vulnerability in the BitdefenderVirusScanner binary as used in Bitdefender Virus Scanner for MacOS may allow .dynamic library injection (DYLD injection) without being blocked by AppleMobileFileIntegrity (AMFI). This issue is caused by the absence of Hardened Runtime or Library Validation signing. This issue affects Bitdefender Virus Scanner versions before 3.18.