Critical · published November 11, 2025
🚨 A double fetch in the Avast/AVG sandbox kernel driver for versions below 25.3 opens a gateway for local attackers to escalate privileges with a pool overflow! 🔥 Think of this like a restaurant where a waiter repeatedly takes orders without checking if the kitchen is ready. If the chef miscalculates ingredients for one order, it could lead to a disastrous meal for everyone! An attacker could gain unauthorized access to critical system privileges, allowing them to manipulate data, install malicious software, or even take full control of the machine. This could lead to an absolute nightmare for users, potentially compromising their sensitive information and system integrity!
Think of this like a restaurant where a waiter repeatedly takes orders without checking if the kitchen is ready. If the chef miscalculates ingredients for one order, it could lead to a disastrous meal for everyone! This vulnerability stems from a double fetch issue in the sandbox kernel driver of Avast/AVG Antivirus where an attacker can exploit an established memory buffer overflow to escalate their local privileges unexpectedly.
An attacker could gain unauthorized access to critical system privileges, allowing them to manipulate data, install malicious software, or even take full control of the machine. This could lead to an absolute nightmare for users, potentially compromising their sensitive information and system integrity! Update your Avast/AVG Antivirus to version 25.3 or later immediately to close this loophole. It's essential to ensure your security software is updated regularly to protect against such critical vulnerabilities. Additionally, consider reviewing your system configurations for further hardening. You’ve got this! Just follow those steps and you'll fortify your defenses in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| avast/antivirus | < 25.3 | 25.3 |