CVE-2025-4134 | BDVDB-2026-280409 Detail
AvastAvast Business Antivirus
Description#
Lack of file validation in do_update_vps in Avast Business Antivirus for Linux 4.5 on Linux allows local user to spoof or tamper with the update file via an unverified file write.
Impact#
CAPEC-148 Content Spoofing
Weaknesses#
- CWE-552 Files or Directories Accessible to External Parties
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.