CVE-2026-6676: Avira antivirus engine heap buffer OOB write when scanning a malformed POSIX tar archive
Heap buffer out-of-bounds write vulnerability in Avira Antivirus engine when scanning a malformed POSIX tar archive may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.
This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.27.12.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Avira scan engineto a version that resolves this vulnerability.Fixed in 8.3.27.12
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6676?
CVE-2026-6676 has a high severity rating of 7.8.
How do I fix CVE-2026-6676?
To fix CVE-2026-6676, upgrade to Avira scan engine build 8.3.27.12 or any later release.
What impact does CVE-2026-6676 have on my system?
CVE-2026-6676 may allow local execution of code or cause a denial-of-service of the antivirus engine process.
Which systems are affected by CVE-2026-6676?
CVE-2026-6676 affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.27.
What type of vulnerability is CVE-2026-6676?
CVE-2026-6676 is a heap buffer out-of-bounds write vulnerability.