Endpoint Security and HX
CVE-2024-0213: Buffer overflow in Trellix Agent (TA)
A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated permissions, or cause a Denial of Service (DoS), through exploiting a memory corruption issue in the TA service, which runs as root.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Trellix Agent (TA) Prior to 5.8 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated permissions, or cause a Denial of Service (DoS), through exploiting a memory corruption issue in the TA service, which runs as root. This may also result in the disabling of event reporting to ePO, caused by failure to validate input from the file correctly.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.