CVE-2026-12067 | BDVDB-2026-400896 Detail
Gen DigitalAvast Antivirus, Avast One, Avast Premium Security, Avast Ultimate, Avast Business Security
Description#
Missing exception handlers in AvastSvc native message dispatcher (ashServ.dll) on Windows allow a local, unprivileged attacker to crash the service by sending specially crafted JSON messages. The vulnerability spans multiple handler pathways in the RPC-based native message protocol: * Log_NmSvc.message handler: converts JSON fields to strings without type validation and without exception boundaries. * OpenInSz_NmSvc handler: converts URL and origin fields to strings without type checking, exposing an exception. * OpenInSz_NmSvc.profile handler: converts the profile field to an integer without validation. In all three cases, the exceptions are not caught by action-specific handlers and propagate up the dispatcher. The common root cause is the absence of try-catch blocks around JSON type conversions in the native message processing chain.
Impact#
A local, unprivileged attacker can crash AvastSvc by sending specially crafted JSON via native message handlers, resulting in temporary denial of service, antivirus protection disruption, and repeated service restart churn.
Weaknesses#
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.