Vienna Symphonic Library vulnerabilities
We track 1 vulnerability in Vienna Symphonic Library products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 26, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Vienna Symphonic Library vulnerabilities
- 8.8 High severity
Vienna Assistant: Missing Authentication for Critical Functionality
The VSL privileged helper does utilize NSXPC for IPC. The implementation of the "shouldAcceptNewConnection" function, which is used by the NSXPC framework to validate if a client should be allowed to connect to the XPC listener, does not validate clients at al