
CVE-2024-53407
In Phiewer 4.1.0, a dylib injection leads to Command Execution whichallow attackers to inject dylib file potentially leading to remote control and unauthorized access to sensitive user data in MacOs.
use the .dylib file to inject a command
DYLD_INSERT_LIBRARIES=exploit_combined.dylib /Applications/Phiewer\ \(lite\).app/Contents/MacOS/Phiewer\ \(lite\)
Command Execution (Local)