CVE-2026-80303: falha em Gen Digital Avast Antivirus, Avast One, Avast…
Avast WFP stream parser integer underflow causes system crash
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
0Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Track
An integer underflow vulnerability in the Avast Windows Filtering Platform (WFP) stream parser on Windows allows denial of service by causing a system crash.
The WFP callout driver processes network stream data and computes length values for packet fragment reassembly. The length calculation does not properly validate input stream sizes against expected boundaries. When processing specially crafted input, the length computation underflows, resulting in allocation or buffer access with an extremely large wrapped-around size value.
The underflow can be triggered remotely via network traffic destined for the filtered port, or locally via crafted data provided to the filtering interface. The resulting memory allocation failure or out-of-bounds access causes a kernel panic and system crash.
Produtos afetados
Gen Digital · Avast Antivirus, Avast One, Avast Premium Security, Avast UltimateGen Digital · AVG Antivirus Free, AVG Internet Security, AVG UltimateGen Digital · Norton Antivirus Plus, Norton 360 Standard, Norton 360 Deluxe, Norton 360 AdvancedCVEs relacionadas — Gen Digital Avast Antivirus, Avast One, Avast…
No mesmo produto, das mais perigosas para as menos.
CVE-2026-82964HIGHAvast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sysEPSS 0.2%CVE-2026-80301—Avast sandbox escape via unpreserved COM pathway through Task SchedulerEPSS —CVE-2026-80302—Avast sandbox escape via arbitrary file write in virtualized environmentEPSS —CVE-2026-12067—AvastSvc denial of service via unhandled JsonCpp exceptions in native message handlersEPSS —