Medium severity5.5OSV Advisory· Published Apr 30, 2024· Updated Apr 15, 2026

CVE-2024-22405

Description

XADMaster is an objective-C library for archive and file unarchiving and extraction. When extracting a specially crafted zip archive XADMaster may not apply quarantine attribute correctly. Such behaviour may circumvent Gatekeeper checks on the system. Only macOS installations are affected. This issue was fixed in XADMaster 1.10.8. It is recommended to upgrade to the latest version. There are no known workarounds for this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MacPaw/XadmasterOSV2 versions
v1.10.4, v1.10.5, v1.10.7+ 1 more
- (no CPE)range: v1.10.4, v1.10.5, v1.10.7
- (no CPE)range: <1.10.8

Patches

Vulnerability mechanics

References

github.com/MacPaw/XADMaster/commit/b75c05bc3bca9e183ecd3c512e270ce93006da3cnvd
github.com/MacPaw/XADMaster/security/advisories/GHSA-xg3c-r7w5-7xw2nvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000