CVE-2024-8272 — macOS Universal Audio (UAConnect) <= 2.7.0 - Local Privilege Escalation
The com.uaudio.bsd.helper service, responsible for handling privileged operations, fails to implement critical client validation during XPC inter-process communication (IPC). Sp…
Published: 2024-11-25 · CVSS: 7.8 · CVSS 3.1
The com.uaudio.bsd.helper service, responsible for handling privileged operations, fails to implement critical client validation during XPC inter-process communication (IPC). Specifically, the service does not verify the code requirements, entitlements, or security flags of any client attempting to establish a connection. This lack of proper validation allows unauthorized clients to exploit the service's methods and escalate privileges to root.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7