CVE-2024-11128: Insufficient Hardened Runtime or Library Validation signing in Bitdefender Virus Scanner for macOS
A vulnerability in the BitdefenderVirusScanner binary as used in Bitdefender Virus Scanner for MacOS may allow .dynamic library injection (DYLD injection) without being blocked by AppleMobileFileIntegrity (AMFI). This issue is caused by the absence of Hardened Runtime or Library Validation signing. This issue affects Bitdefender Virus Scanner versions before 3.18.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11128?
CVE-2024-11128 is rated as a high severity vulnerability due to its potential for dynamic library injection without sufficient checks.
How do I fix CVE-2024-11128?
To fix CVE-2024-11128, ensure you update the Bitdefender Virus Scanner to version 3.18 or newer, which addresses this vulnerability.
What systems are affected by CVE-2024-11128?
CVE-2024-11128 affects Bitdefender Virus Scanner on MacOS up to version 3.18.
Can CVE-2024-11128 be exploited remotely?
CVE-2024-11128 does not require remote exploitation, as it can be triggered locally on the affected system.
What are the consequences of not addressing CVE-2024-11128?
Failure to address CVE-2024-11128 may allow malicious actors to perform unauthorized actions via DYLD injection, compromising system integrity.