CVE-2024-9484

An null-pointer-derefrence in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed xar file to crash the application during file processing.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - security@nortonlifelock.com

Published

2024-10-04

Last modified

2024-10-07

Weaknesses

CWE-476

Affected products

• Antivirus (Avast)
• Antivirus (Avg)
• Antivirus (Avgavast)

References

• https://support.norton.com/sp/static/external/tools/security-advisories.html