CVE-2015-8620

Heap-based buffer overflow in the Avast virtualization driver (aswSnx.sys) in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus before 11.1.2253 allows local users to gain privileges via a Unicode file path in an IOCTL request.

• CWE-119

• http://packetstormsecurity.com/files/135859/Avast-11.1.2245-Heap-Overflow.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/Feb/94Exploit, Mailing List, Third Party Advisory
• http://www.securitytracker.com/id/1035093Third Party Advisory, VDB Entry
• https://www.nettitude.co.uk/exploiting-a-kernel-paged-pool-buffer-overflow-in-avast-virtualization-driver/Exploit
• http://packetstormsecurity.com/files/135859/Avast-11.1.2245-Heap-Overflow.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/Feb/94Exploit, Mailing List, Third Party Advisory
• http://www.securitytracker.com/id/1035093Third Party Advisory, VDB Entry
• https://www.nettitude.co.uk/exploiting-a-kernel-paged-pool-buffer-overflow-in-avast-virtualization-driver/Exploit

Published

Apr 13, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8614Multiple stack-based buffer overflows in the (1) conv_jistoe…
• CVE-2015-8615The hvm_set_callback_via function in arch/x86/hvm/irq.c in X…
• CVE-2015-8616Use-after-free vulnerability in the Collator::sortWithSortKe…
• CVE-2015-8617Format string vulnerability in the zend_throw_or_error funct…
• CVE-2015-8618The Int.Exp Montgomery code in the math/big library in Go 1.…
• CVE-2015-8619The Human Monitor Interface support in QEMU allows remote at…7.5
• CVE-2015-8621t-coffee before 11.00.8cbe486-2 allows local users to write …
• CVE-2015-8622Cross-site scripting (XSS) vulnerability in MediaWiki before…
• CVE-2015-8623The User::matchEditToken function in includes/User.php in Me…
• CVE-2015-8624The User::matchEditToken function in includes/User.php in Me…
• CVE-2015-8625MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x befor…
• CVE-2015-8626The User::randomPassword function in MediaWiki before 1.23.1…