Description
Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrary file creation. The issue was fixed with Avast and AVG Antivirus version 22.11
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Avast | Avast Antivirus | 22.5 – ≤ 22.10 | — |
| AVG | AVG Antivirus | 22.5 – ≤ 22.10 | — |
Advisories 1
- WID-SEC-2023-1041 Avast und AVG Antivirus: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Apr 19, 2023