CVE-2024-9482

An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed Mach-O file to crash the application during file processing.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - security@nortonlifelock.com

Published

2024-10-04

Last modified

2024-10-07

Weaknesses

CWE-787

Affected products

• Antivirus (Avast)
• Antivirus (Avg)
• Antivirus (Avgavast)

References

• https://support.norton.com/sp/static/external/tools/security-advisories.html