Read the docs
TI-2014-07822 Aliases CVE-2014-9632GHSA-7vj3-fhg7-94xg

The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and…

Priority LOW 35CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protection before 2015.5315 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x830020f8 IOCTL call.

Why it matters now

EPSS 0.01458 73rd percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:avg:protection:*:*:*:*:*:*:*:*2015 – 2015.5314VulnerableAVG
cpe:2.3:a:avg:internet_security:*:*:*:*:*:*:*:*2013 to before 2013.3495; 2015 to before 2015.5314VulnerableAVG
  • cpe:2.3:a:avg:protection:*:*:*:*:*:*:*:* Versions 2015 – 2015.5314 Vulnerable ·AVG
  • cpe:2.3:a:avg:internet_security:*:*:*:*:*:*:*:* Versions 2013 to before 2013.3495; 2015 to before 2015.5314 Vulnerable ·AVG

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-9632
  2. 2026-10-03 Alias added: GHSA-7vj3-fhg7-94xg

References

Exploit 2

Advisory 2

Other 1

  • TI-2024-06038 Local privilege escalation vulnerability in AVG Internet Security CVSS 3.1HIGH 7.8
  • TI-2017-03572 Code injection vulnerability in AVG Ultimate 17.1 (and earlier), AVG Internet Security… CVSS 3.0MEDIUM 6.7
  • TI-2015-07058 AVG Internet Security 2015 allocates memory with Read, Write, Execute (RWX) permissions… CVSS 2.0MEDIUM 6.4
  • TI-2010-04850 Race condition in AVG Internet Security 9.0.791 on Windows XP allows local users to… CVSS 2.0MEDIUM 6.2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences