Bitdefender Virus Scanner for macOS DYLD Injection Vulnerability

A vulnerability exists in the Bitdefender Virus Scanner binary for macOS, allowing dynamic library injection (DYLD injection) that bypasses Apple Mobile File Integrity (AMFI). This issue arises from the lack of Hardened Runtime or Library Validation signing and affects Bitdefender Virus Scanner versions prior to 3.18.

Impact

Exploitation of this vulnerability could lead to unauthorized DYLD injection, allowing malicious dynamic libraries to be loaded by the application, potentially leading to arbitrary code execution.

Remediation

Users can update to Bitdefender Virus Scanner version 3.18 or later to address this vulnerability.