CVE-2020-20118

Summary

CVE-2020-20118 is a buffer overflow vulnerability affecting Avast AntiVirus versions prior to 19.7. An attacker can exploit this issue by crafting a specific request to the aswSnx.sys driver, leading to a denial of service. The vulnerability occurs due to insufficient bounds checking, allowing excess data to be written into a buffer. Successful exploitation of this flaw can result in the application crashing, causing a denial of service to the Avast AntiVirus software. This issue poses a risk to local users and should be addressed by applying the necessary patch or upgrade.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.