CVE-2024-9483

A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS may allow a malformed xar file to crash the application during processing.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - security@nortonlifelock.com

Published

2024-10-04

Last modified

2024-10-07

Weaknesses

CWE-476

Affected products

• Antivirus (Avast)
• Antivirus (Avg)
• Antivirus (Avgavast)

References

• https://support.norton.com/sp/static/external/tools/security-advisories.html