CVE-2026-6676: falha de alta gravidade em Gen Digital Avira Antivirus
Avira antivirus engine heap buffer OOB write when scanning a malformed POSIX tar archive
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 0.1%
Heap buffer out-of-bounds write vulnerability in Avira Antivirus engine when scanning a malformed POSIX tar archive may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.
This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.27.12.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Gen Digital · Avira AntivirusCVEs relacionadas — Gen Digital Avira Antivirus
No mesmo produto, das mais perigosas para as menos.
CVE-2025-8351HIGHAvira antivirus engine heap buffer OOB read when scanning a malformed fileEPSS 0.2%CVE-2025-7017HIGHAvira antivirus engine heap buffer OOB read when scanning a malformed Windows MSI fileEPSS 0.1%CVE-2025-7003HIGHAvira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 1)EPSS 0.1%CVE-2025-7002HIGHAvira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 2)EPSS 0.1%CVE-2025-14098HIGHAvira antivirus engine heap buffer OOB write when scanning a malformed MS-DOS executable fileEPSS 0.1%CVE-2025-9033HIGHAvira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 3)EPSS 0.1%