CVE-2026-6676
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A heap buffer out-of-bounds write vulnerability in the Avira Antivirus engine when scanning a malformed POSIX tar archive may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.
Risk Assessment
This vulnerability could lead to serious security threats, including unauthorized system access or disruption of antivirus software functionality.
Recommendation
It is recommended to update the Avira Antivirus engine to version 8.3.27.12 or later to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
Heap buffer out-of-bounds write vulnerability in Avira Antivirus engine when scanning a malformed POSIX tar archive may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.27.12.