CVE-2018-18329

Vulnerability

The vulnerability is an untrusted pointer dereference in the KERedirect kernel extension of Trend Micro Antivirus for Mac (Consumer) version 7.0 (2017) and above. The issue arises from insufficient validation of a user-supplied value at offset 0x6F4E before it is dereferenced as a pointer. [1]

Exploitation

A local attacker must first obtain the ability to execute low-privileged code on the target system. The attacker then exploits the flaw by providing a malicious value that, when dereferenced, leads to arbitrary code execution in kernel context. No additional interaction or authentication is required beyond low-privilege access. [1]

Impact

Successful exploitation allows the attacker to execute arbitrary code with kernel privileges, resulting in complete compromise of system confidentiality, integrity, and availability. The attacker gains full control over the affected system. [1]

Mitigation

No specific mitigation or patch is mentioned in the available reference. Trend Micro may have released updates; consult vendor advisory for fixed versions. [1]