Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-11128

22
FAUCET Score

CVE-2024-11128 is a high-severity vulnerability affecting Bitdefender Virus Scanner for macOS versions prior to 3.18. It allows for dynamic library injection (DYLD injection) due to the absence of Hardened Runtime or Library Validation signing in the BitdefenderVirusScanner binary, bypassing AppleMobileFileIntegrity (AMFI). This local attack requires low privileges and no user interaction, potentially leading to high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
>= 0, < 3.18CPE match
cpe:2.3:a:bitdefender:virus_scanner:*:*:*:*:*:macos:*:*
< 3.18CPE matchmatch criteria
cpe:2.3:a:bitdefender:virus_scanner:*:*:*:*:*:macos:*:*

CVSS Data

CVSS version used by this source: 4.0

8.4HIGH

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
LOCAL
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
ACTIVE
VS Confidentiality
HIGH
VS Integrity
HIGH
VS Availability
NONE
SS Confidentiality
HIGH
SS Integrity
HIGH
SS Availability
NONE
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.16%
Probability of exploitation in next 30 days
EPSS Percentile
5.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0016 is in the 25th percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (5)

elasticvendor investigatingvia llm_extracted
hyperledgervendor investigatingvia llm_extracted
View patch
jenkinsvendor investigatingvia llm_extracted
View patch
libvipsvendor investigatingvia llm_extracted
power_bivendor investigatingvia llm_extracted
View patch

Vendor Advisories (5)

power_billm-power_bi-33afff6dd5e6bb9d

Insufficient Hardened Runtime or Library Validation signing in Bitdefender Virus Scanner for macOS

Jan 13, 2025
libvipsllm-libvips-0dd3e7a542183495

Insufficient Hardened Runtime or Library Validation signing in Bitdefender Virus Scanner for macOS

Jan 13, 2025
hyperledgerllm-hyperledger-6dba0ade13f9f079

Insufficient Hardened Runtime or Library Validation signing in Bitdefender Virus Scanner for macOS

Jan 13, 2025
jenkinsllm-jenkins-50637c7428148cd0

Insufficient Hardened Runtime or Library Validation signing in Bitdefender Virus Scanner for macOS

Jan 13, 2025
elasticllm-elastic-303cba80d3afd1d4

Insufficient Hardened Runtime or Library Validation signing in Bitdefender Virus Scanner for macOS

Jan 13, 2025

References

bitdefender.com / support/security-advisories/insufficient-hardened-runtime-or-library-validation-signing-in-bitdefender-virus-scanner-for-macos
Vendor Advisory