CVE-2024-11128

HIGH 7.8CVE-2024-11128 · Published 13/01/2025 · updated 17/06/2026

In short

CVE-2024-11128 is a HIGH (CVSS 7.8) vulnerability affecting virus scanner (bitdefender).
Chance of exploitation in the next 30 days (EPSS): 0.16%, higher than 5.5% of all vulnerabilities.
Fix: update to 3.18 or later.

Package	Affected versions	Patched versions
virus scanner bitdefender	`< 3.18`	`3.18`

Description

A vulnerability in the BitdefenderVirusScanner binary as used in Bitdefender Virus Scanner for MacOS may allow .dynamic library injection (DYLD injection) without being blocked by AppleMobileFileIntegrity (AMFI). This issue is caused by the absence of Hardened Runtime or Library Validation signing. This issue affects Bitdefender Virus Scanner versions before 3.18.

References

bitdefender.com/support/security-advisories/insufficient-hardened-runtime-or-library-validation-signing-in-bitdefender-virus-scanner-for-macos · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free