Vulnerability · Published Dec 7, 2022 · Assigned by NLOK
CVE-2022-4291Aswjsflt.dll in Avast Antivirus windows caused a crash of the Mozilla Firefox browser due to heap corruption
High 7.7
In plain English
A high-severity memory corruption in Avast Antivirus from NortonLifelock. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).
Severity (CVSS 3.1)7.7High
Exploit odds (30 days)0.4%top 60.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The aswjsflt.dll library from Avast Antivirus windows contained a potentially exploitable heap corruption vulnerability that could enable an attacker to bypass the sandbox of the application it was loaded into, if applicable. This issue was fixed in version 18.0.1478 of the Script Shield Component.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NortonLifelock | Avast Antivirus | 0 – through 18.0.1473.0 |
Weakness: CWE-119 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L