Priority LOW 25
A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00468 · Published 2022-09-23 · No fix listed CWE-835
Priority LOW 34
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00602 · Published 2022-08-23 · No fix listed
Priority LOW 33
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00454 · Published 2022-08-23 · No fix listed CWE-835
Priority LOW 33
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine crash.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00499 · Published 2022-08-10 · No fix listed
Priority LOW 33
A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files it is possible that can crash the scanning engine.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00509 · Published 2022-08-05 · No fix listed CWE-400
Priority LOW 33
A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed APK file it is possible that can crash the scanning engine.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00466 · Published 2022-07-22 · No fix listed
Priority LOW 33
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aepack.dll component can crash the scanning engine.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0047 · Published 2022-07-22 · No fix listed
Priority LOW 33
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aeheur.dll component can crash the scanning engine.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0047 · Published 2022-07-14 · No fix listed
Priority LOW 30
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0055 · Published 2022-05-25 · No fix listed CWE-404
Priority LOW 30
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVRDL unpacking module component used in certain F-Secure products can crash while scanning a fuzzed files.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00563 · Published 2021-10-08 · No fix listed
Priority LOW 30
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVPACK module component used in certain F-Secure products can crash while scanning a fuzzed files.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00563 · Published 2021-10-08 · No fix listed
Priority LOW 25
A vulnerability affecting F-Secure Antivirus engine was discovered whereby scanning WIM archive file can lead to denial-of-service (infinite loop and freezes AV engine scanner).
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00415 · Published 2021-09-07 · No fix listed CWE-835
Priority LOW 30
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in certain F-Secure products can crash while scanning larger packages/fuzzed files.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0068 · Published 2021-06-21 · No fix listed CWE-476
Priority LOW 28
The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01641 · Published 2020-02-22 · No fix listed CWE-436