Avast Antivirus Heap-Based Buffer Overflow Vulnerability on MacOS Allowing Local Code Execution or Denial-of-Service

A heap-based buffer overflow and out-of-bounds read vulnerability has been identified in Avast Antivirus for MacOS. This issue arises when the antivirus scans a malformed file, potentially leading to local execution of code or causing a denial-of-service condition in the antivirus engine process. The vulnerability affects Avast Antivirus versions 8.3.70.94 prior to 8.3.70.98.

Impact

Exploitation of this vulnerability could result in a heap-based buffer overflow, allowing for local code execution or causing a denial-of-service condition in the antivirus engine process.