Skip to content
OpenAdvisories
Medium · 5.1 CVE-2024-9483 EUVD-2024-49971GHSA-hm4r-q33h-2fw6

Uninitialized variable in digital signiture verification may crash the application

Published Oct 4, 2024 · Updated Oct 7, 2024 · Assigned by NLOK

Description

A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS may allow a malformed xar file to crash the application during processing.

Affected products

VendorProductAffectedFixed
AVG/Avast Antivirus 24/Sep/2024 – < < 24092400 < 24092400

Advisories 1

References