CVE-2025-57443

FrostWire 6.14.0-build-326 for macOS contains permissive entitlements allow-dyld-environment-variables, disable-library-validation that allow unprivileged local attackers to inject code into the FrostWire process via the DYLDINSERTLIBRARIES environment variable. This allows escalated privileges t...

CVE-2025-57443

FrostWire version 6.14.0-build-326 for macOS is vulnerable to local code injection due to permissive entitlements, specifically allow-dyld-environment-variables and disable-library-validation . An unprivileged local attacker can leverage the DYLD_INSERT_LIBRARIES environment variable to inject ma...