Threats tagged 'ghsa-2q9r-4cp6-374g'

An integer underflow vulnerability exists in the Avast Windows Filtering Platform (WFP) stream parser on Windows. This flaw allows denial of service by causing a system crash through a kernel panic. The vulnerability arises from improper validation of input stream sizes during length calculation for packet fragment reassembly, leading to an underflow and subsequent memory allocation or buffer access with an incorrect large size. It can be triggered remotely via network traffic or locally via crafted data to the filtering interface.