CVE-2025-0618

Description

A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper protection event to the HX service to trigger an exception. This exception will prevent any further tamper protection events from being processed, even after a reboot of HX.

PUBLISHED Reserved 2025-01-21 | Published 2025-04-23 | Updated 2025-04-23 | Assigner trellix

Problem types

CWE-94 Improper Control of Generation of Code ('Code Injection')

Product status

References

thrive.trellix.com/s/article/000014456

cve.org (CVE-2025-0618)

nvd.nist.gov (CVE-2025-0618)

Download JSON