PT-2025-1620 · Bitdefender · Bitdefender Virus Scanner

Published 2025-01-13 · Updated 2025-01-14 · CVE-2024-11128

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions Bitdefender Virus Scanner versions prior to 3.18

Description A vulnerability in the BitdefenderVirusScanner binary may allow dynamic library injection (DYLD injection) without being blocked by AppleMobileFileIntegrity (AMFI). This issue is caused by the absence of Hardened Runtime or Library Validation signing.

Recommendations Update to version 3.18 to resolve the issue. As a temporary workaround, consider restricting the use of the BitdefenderVirusScanner binary until a patch is applied.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2024-11128

Affected Products

Bitdefender Virus Scanner

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-11128 · Security Note
• https://bitdefender.com/support/security-advisories/insufficient-hardened-runtime-or-library-validation-signing-in-bitdefender-virus-scanner-for-macos · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-11128 · Vendor Advisory
• https://t.me/cvedetector/15193 · Telegram Post
• https://twitter.com/CVEnew/status/1878928240506437926 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1878957519457911247 · Twitter Post
• https://twitter.com/CveFindCom/status/1878925341453947110 · Twitter Post