CVE-2025-57443

FrostWire version 6.14.0-build-326 for macOS is vulnerable to local code injection due to permissive entitlements, specifically allow-dyld-environment-variables and disable-library-validation . An unprivileged local attacker can leverage the DYLD_INSERT_LIBRARIES environment variable to inject ma...