Approved changes feed: RSS · Atom

cpe:2.3:a:avg/avast:antivirus:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAvg/Avast (aa664c09-617d-5376-a0c0-5ee024897975)
ProductAntivirus (2d3c3b29-cf25-509d-988e-96e66bcb65d6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9484 vulnerable 2026-06-08 07:00:28.050743 Details available
MEDIUM (5.1)
An null-pointer-derefrence in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed xar file to crash the application during file processing.
Published: 2024-10-04T12:44:25.057Z
Updated: 2024-10-07T11:27:37.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9483 vulnerable 2026-06-08 07:00:28.050216 Uninitialized variable in digital signiture verification may crash the application
MEDIUM (5.1)
A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS may allow a malformed xar file to crash the application during processing.
Published: 2024-10-04T12:29:16.430Z
Updated: 2024-10-07T11:27:19.528Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9482 vulnerable 2026-06-08 07:00:28.049791 Out of Bounds write on scan of malformed Mach-O file may crash the application
MEDIUM (5.1)
An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed Mach-O file to crash the application during file processing.
Published: 2024-10-04T12:22:47.087Z
Updated: 2024-10-07T11:27:03.261Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9481 vulnerable 2026-06-08 07:00:28.047869 Out of Bounds write on scan of malformed eml file may crash the application
MEDIUM (5.1)
An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed eml file to crash the application during file processing.
Published: 2024-10-04T12:15:14.709Z
Updated: 2024-10-07T11:26:43.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5803 vulnerable 2026-06-08 06:56:17.466478 Local privelage escalation via COM hijacking
HIGH (7.5)
The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-of-use (TOCTOU) when self protection is disabled.
Published: 2024-10-03T14:20:01.775Z
Updated: 2024-10-03T15:38:40.784Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.