Quarkslab

**Name of the Vulnerable Software and Affected Versions** Avira Internet Security (affected versions not specified) **Description** An improper link resolution issue exists in the Software Updater component of Avira Internet Security. The Software Updater, running with SYSTEM privileges, deletes a file located at C:ProgramData without verifying if the path is a symbolic link or reparse point. A local attacker can create a malicious link to redirect the deletion to an arbitrary file, potentially leading to the deletion of attacker-selected files with SYSTEM privileges. This could result in local privilege escalation, denial of service, or compromise of system integrity, depending on the targeted file and operating system setup. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Avira Internet Security (affected versions not specified) **Description** The software contains a flaw involving the deserialization of untrusted data within the System Speedup component. The `Avira.SystemSpeedup.RealTimeOptimizer.exe` process, operating with SYSTEM privileges, deserializes data from a file located at `C:ProgramData` using .NET BinaryFormatter. This process lacks input validation or deserialization safeguards. An attacker can create or modify this file with a crafted serialized payload, leading to arbitrary code execution with SYSTEM privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Avira Internet Security (affected versions not specified) **Description** A time-of-check time-of-use (TOCTOU) issue exists in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and then deletes them in a separate cleanup phase without revalidating the target path. A local attacker can replace a previously scanned directory with a junction or reparse point before deletion, causing the privileged process to delete an unintended system location. This could lead to the deletion of protected files or directories, potentially resulting in local privilege escalation, denial of service, or system integrity compromise, depending on the target. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 Description: The issue is related to a possible out of bounds read in the `bnep data ind` function of `bnep main.cc`. This could lead to remote information disclosure without requiring additional execution privileges. User interaction is not necessary for exploitation. Recommendations: For Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1, at the moment, there is no information about a newer version that contains a fix for this issue.