CVE-2024-9483: 
AVG Antivirus vulnerability analysis and mitigation

A null-pointer-dereference vulnerability was discovered in the signature verification module of AVG/Avast Antivirus for MacOS. The vulnerability affects versions prior to signature 24092400 released on September 24, 2024. This security flaw was assigned identifier CVE-2024-9483 and was first disclosed on October 4, 2024 (NVD).

The vulnerability is classified as a NULL Pointer Dereference (CWE-476) issue. According to the National Vulnerability Database, it received a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The vulnerability requires local access, low attack complexity, and low privileges to exploit, with no user interaction needed (NVD).

When exploited, this vulnerability allows a malformed xar file to crash the application during processing, potentially leading to a denial of service condition. The impact is primarily focused on availability, with no direct impact on confidentiality or integrity (NVD).

The vulnerability was addressed in AVG/Avast Antivirus signature version 24092400 and later. Users should ensure their antivirus signatures are updated to the latest version to mitigate this vulnerability (Norton Advisory).