CVE-2025-4134

Lack of file validation in Avast Business Antivirus for Linux allows writing untrusted update files PUBLISHED

Description (CNA)

Lack of file validation in do_update_vps in Avast Business Antivirus for Linux 4.5 on Linux allows local user to spoof or tamper with the update file via an unverified file write.

Affected (CNA)

Vendor / product	Versions
Avast / Avast Business Antivirus	affected 4.5.1

CWE

CWE-552

References

https://www.gendigital.com/us/en/contact-us/security-advisories/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.