1. Home
  2. CVE Database
  3. CVE-2022-4291
HIGH · 7.7

CVE-2022-4291

The aswjsflt.dll library from Avast Antivirus windows contained a potentially exploitable heap corruption vulnerability that could enable an attacker to bypass the sandbox of the application it was lo...

Vulnerability Description

The aswjsflt.dll library from Avast Antivirus windows contained a potentially exploitable heap corruption vulnerability that could enable an attacker to bypass the sandbox of the application it was loaded into, if applicable. This issue was fixed in version 18.0.1478 of the Script Shield Component.

CVSS Score

7.7

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
LOW

Affected Products

VendorProductVersions
AvastScript Shield<= 18.0.1473.0

Related Weaknesses (CWE)

CWE-119CWE-787

References

FAQ

What is CVE-2022-4291?

CVE-2022-4291 is a vulnerability with a CVSS score of 7.7 (HIGH). The aswjsflt.dll library from Avast Antivirus windows contained a potentially exploitable heap corruption vulnerability that could enable an attacker to bypass the sandbox of the application it was lo...

How severe is CVE-2022-4291?

CVE-2022-4291 has been rated HIGH with a CVSS base score of 7.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-4291?

Check the references section above for vendor advisories and patch information. Affected products include: Avast Script Shield.