Skip to content
OpenAdvisories
Medium · 5.5 CVE-2024-22405 EUVD-2024-19960

XADMaster may not apply quarantine attribute correctly to extracted files

Published Apr 30, 2024 · Updated Aug 1, 2024 · Assigned by GitHub_M

Description

XADMaster is an objective-C library for archive and file unarchiving and extraction. When extracting a specially crafted zip archive XADMaster may not apply quarantine attribute correctly. Such behaviour may circumvent Gatekeeper checks on the system. Only macOS installations are affected. This issue was fixed in XADMaster 1.10.8. It is recommended to upgrade to the latest version. There are no known workarounds for this issue.

Affected products

VendorProductAffectedFixed
MacPaw XADMaster < 1.10.8 —

References