CVE-2020-20118

MediumCVSS 5.5

Published: 11/07/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

A buffer overflow vulnerability in the aswSnx.sys driver of Avast AntiVirus before version 19.7 allows a local attacker to cause a denial of service (DoS) via a crafted request.

Risk Assessment

A local attacker can crash the system or the antivirus service, leading to disruption of protection and potential exposure to other threats.

Recommendation

It is recommended to immediately update Avast AntiVirus to version 19.7 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Buffer Overflow vulnerability in Avast AntiVirus before v.19.7 allows a local attacker to cause a denial of service via a crafted request to the aswSnx.sys driver.