ZDI-25-256: Avast Free Antivirus Integer Overflow Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Avast Free Antivirus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-3500.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-256?
ZDI-25-256 has been assigned a CVSS rating indicating a critical risk due to its potential for privilege escalation.
How do I fix ZDI-25-256?
To mitigate ZDI-25-256, users should update Avast Free Antivirus to the latest version where the vulnerability has been patched.
Who is affected by ZDI-25-256?
ZDI-25-256 affects users of Avast Free Antivirus specifically on systems where low-privileged code can be executed.
What kind of attack does ZDI-25-256 involve?
ZDI-25-256 enables local attackers to escalate privileges after executing low-privileged code on the vulnerable system.
What steps should I take if I suspect ZDI-25-256 has been exploited?
If you suspect that ZDI-25-256 has been exploited, you should immediately secure your system, remove any unauthorized access, and update your antivirus software.