CVE-2022-4291

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to 18.0.1478

Description The issue is related to a heap corruption vulnerability in the aswjsflt.dll library of Avast Antivirus, which could allow an attacker to bypass the sandbox of the application it was loaded into. This vulnerability is associated with a buffer overflow in memory when loading the aswjsflt.dll library.

Recommendations For versions prior to 18.0.1478, update the Script Shield Component to version 18.0.1478 to resolve the issue. As a temporary workaround, consider restricting the use of the aswjsflt.dll library until the update is applied.