| शीर्षक | AppHouseKitchen AlDente - Charge Limiter < 1.30 Privilege Escalation |
|---|
| विवरण | AppHouseKitchen AlDente-Charge Limiter <1.30 is vulnerable to unauthorized privileged hardware operations due to its insecure XPC client validation. The XPC server does not verify whether the client is valid, an attacker can communicate with the XPC server and instruct it to perform privileged hardware operation, such as reading and modifying hardware settings, by calling exposed methods of the helper protocol. In certain situations, physical damage and danger are possible, such as overheat, instability. |
|---|
| स्रोत | ⚠️ https://winslow1984.com/books/cve-collection/page/aldente-charge-limiter-130-unauthorized-privileged-hardware-operations |
|---|
| उपयोगकर्ता | winslow1984 (UID 79140) |
|---|
| सबमिशन | 31/01/2025 06:29 AM (2 साल पहले) |
|---|
| संयम | 06/02/2025 12:58 PM (6 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 294844 [AppHouseKitchen AlDente Charge Limiter तक 1.29 पर macOS XPC Service com.apphousekitchen.aldente-pro.helper shouldAcceptNewConnection अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|