CVE-2024-9482

Summary

CVE-2024-9482 is a vulnerability affecting AVG/Avast Antivirus on MacOS, specifically in the engine module associated with signature <24092400 released on September 24, 2024. This out-of-bounds write flaw allows a malformed Mach-O file to crash the application during file processing, posing a medium-level risk with an exploitability score of 1.4. The vulnerability does not require special privileges or user interaction, but it can lead to a significant availability impact due to application crashes. Users are advised to update their antivirus software to the latest version to mitigate this issue. The CVSS score for this vulnerability is 5.1, indicating that while there is no confidentiality or integrity impact, the potential for system disruption remains high.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.