CVE-2024-9483 — Uninitialized variable in digital signiture verification may crash the application

CVE-2024-9483

Uninitialized variable in digital signiture verification may crash the application PUBLISHED

Description (CNA)

A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS may allow a malformed xar file to crash the application during processing.

Affected (CNA)

Vendor / product	Versions
AVG/Avast / Antivirus	affected 24/Sep/2024 before < 24092400

CWE

CWE-476

References

https://support.norton.com/sp/static/external/tools/security-advisories.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.