Executive Summary

This vulnerability is a heap buffer out-of-bounds read in Avast Antivirus products when scanning a malformed Windows PE file.

It occurs because the antivirus scanning logic improperly handles certain malformed files, which can lead to reading memory outside the intended buffer.

This flaw may allow local attackers to execute code or cause a denial-of-service (DoS) by crashing the antivirus process.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can impact you by allowing a local attacker to execute arbitrary code on your system or cause the antivirus process to crash, resulting in a denial-of-service.

This could compromise the security of your device by bypassing antivirus protections or causing interruptions in antivirus functionality.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, ensure that your Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, or Avast Business Antivirus product is updated to virus definition build VPS 25021310 or later.

Install the latest virus definition updates delivered through the Gen Digital virus definition update stream, as installations at or above this build are not vulnerable regardless of the product consuming the stream.

Useful 0 Not Useful 0