CVE-2018-10408

CVE-2018-10408 concerns VirusTotal and other macOS third‑party tools where a maliciously crafted Universal/Fat binary can bypass code-signing checks and cause unsigned malware to execute. The root cause is an inconsistency in how Mach‑O files are verified within Fat/Universal binaries: if the Fat...

CVE-2018-10408

An issue was discovered in VirusTotal. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned co...