The com.uaudio.bsd.helper service, responsible for handling privileged operations, fails to implement critical client validation during XPC inter-process communication (IPC). Specifically, the service does not verify the code requirements, entitlements, or security flags of any client attempting to establish a connection. This lack of proper validation allows unauthorized clients to exploit the service's methods and escalate privileges to root.
References
| Link | Resource |
|---|---|
| https://pentraze.com/vulnerability-reports |
Configurations
No configuration.
History
No history.
Information
Published : 2024-11-25 18:15
Updated : 2024-11-25 18:15
NVD link : CVE-2024-8272
Mitre link : CVE-2024-8272
CVE.ORG link : CVE-2024-8272
JSON object : View
Products Affected
No product.
CWE
CWE-862
Missing Authorization