CVE-2024-9483 Uninitialized variable in digital signiture verification may crash the application

A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature 24092400 released on 24/Sep/2024 on MacOS may allow a malformed xar file to crash the application during processing...

CVE-2024-9483

CVE-2024-9483 affects AVG/Avast Antivirus on macOS. A null-pointer-dereference in the signature verification module can cause a crash when processing malformed xar files in signatures prior to version 24092400. PT-2024-39659 confirms affected versions and provides remediation: update to signature...

CVE-2024-9482 Out of Bounds write on scan of malformed Mach-O file may crash the application

An out-of-bounds write in the engine module in AVG/Avast Antivirus signature 24092400 released on 24/Sep/2024 on MacOS allows a malformed Mach-O file to crash the application during file processing...

CVE-2024-9482

AVG/Avast Antivirus for macOS has an out-of-bounds write in the engine module triggered by malformed Mach-O files, potentially crashing the application during file processing. Affected are versions with signatures prior to 24092400. Remediation: update antivirus signature to 24092400 or later; as...

CVE-2024-9482 Out of Bounds write on scan of malformed Mach-O file may crash the application

An out-of-bounds write in the engine module in AVG/Avast Antivirus signature 24092400 released on 24/Sep/2024 on MacOS allows a malformed Mach-O file to crash the application during file processing...

CVE-2024-9481 Out of Bounds write on scan of malformed eml file may crash the application

An out-of-bounds write in the engine module in AVG/Avast Antivirus signature 24092400 released on 24/Sep/2024 on MacOS allows a malformed eml file to crash the application during file processing...

CVE-2024-9481 Out of Bounds write on scan of malformed eml file may crash the application

An out-of-bounds write in the engine module in AVG/Avast Antivirus signature 24092400 released on 24/Sep/2024 on MacOS allows a malformed eml file to crash the application during file processing...

CVE-2024-9481

CVE-2024-9481 describes an out-of-bounds write in the engine module of AVG/Avast Antivirus, for MacOS, affecting signatures prior to 24092400. A malformed EMl file can crash the application during file processing. Affected product/version scope: AVG/Avast Antivirus with signature

Avast Antivirus 安全漏洞

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in versions prior to Avast Antivirus 24092400, which stems from a null pointer dereference issue that may cause the application to crash on MacOS systems when processing malformed xar...

Avast Antivirus 安全漏洞

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in versions prior to Avast Antivirus 24092400, which stems from an out-of-bounds write issue that may cause the application to crash on MacOS systems when processing malformed Mach-O fil...

PT-2024-39657 · Avast · Avg/Avast Antivirus

Name of the Vulnerable Software and Affected Versions: AVG/Avast Antivirus versions prior to signature 24092400 Description: The issue is related to an out-of-bounds write in the engine module of AVG/Avast Antivirus, which can be triggered by a malformed eml file. This can cause the application t...

Avast Antivirus 安全漏洞

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in versions prior to Avast Antivirus 24092400, which stems from an out-of-bounds write issue that may cause the application to crash on MacOS systems when processing malformed eml files...

Avast Antivirus 安全漏洞

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in versions prior to Avast Antivirus 24092400, which stems from a null pointer dereference issue that may cause the application to crash on MacOS systems when processing malformed xar...

PT-2024-39659 · Avast · Avg/Avast Antivirus

Name of the Vulnerable Software and Affected Versions: AVG/Avast Antivirus versions prior to signature 24092400 Description: A null-pointer-dereference issue exists in the signature verification module of AVG/Avast Antivirus on MacOS. This issue may allow a malformed xar file to crash the...

CVE-2024-5803

Affecting software: AVG/Avast Antivirus (AVGUI.exe). Vulnerability: Local privilege escalation via a COM hijack under a TOCTOU race condition when self-protection is disabled. Versions affected: before 24.1. Impact: An attacker able to exploit this locally to gain higher privileges. Root cause: C...

Avast Antivirus 安全漏洞

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in versions prior to Avast Antivirus 24.1, which stems from a vulnerability that could allow a local attacker to elevate privileges via COM hijacking during the time of check to time of...

PT-2024-37167 · Avast · Avg/Avast Antivirus

Name of the Vulnerable Software and Affected Versions: AVG/Avast Antivirus versions prior to 24.1 Description: The issue allows a local attacker to escalate privileges via a COM hijack in a time-of-check to time-of-use TOCTOU scenario when self-protection is disabled. This occurs in the AVGUI.exe...

PT-2024-38193 · Avast · Avast Free Antivirus

Name of the Vulnerable Software and Affected Versions: Avast Free Antivirus affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of Avast Free Antivirus. An attacker must first obtain the ability to execute low-privileged...

PT-2024-38190 · Avast · Avast Cleanup Premium

Name of the Vulnerable Software and Affected Versions: Avast Cleanup Premium affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of Avast Cleanup Premium. An attacker must first obtain the ability to execute low-privilege...

(0Day) Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Avast Cleanup Premium. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Avast...