{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows"
          ],
          "product": "Avast Antivirus, Avast One, Avast Premium Security, Avast Ultimate",
          "vendor": "Gen Digital",
          "versions": [
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows"
          ],
          "product": "AVG Antivirus Free, AVG Internet Security, AVG Ultimate",
          "vendor": "Gen Digital",
          "versions": [
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows"
          ],
          "product": "Norton Antivirus Plus, Norton 360 Standard, Norton 360 Deluxe, Norton 360 Advanced",
          "vendor": "Gen Digital",
          "versions": [
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Teng Zheng Wang by VulnGuard Labs"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn integer underflow vulnerability in the Avast Windows Filtering Platform (WFP) stream parser on Windows allows denial of service by causing a system crash.\u003c/p\u003e\u003cp\u003eThe WFP callout driver processes network stream data and computes length values for packet fragment reassembly. The length calculation does not properly validate input stream sizes against expected boundaries. When processing specially crafted input, the length computation underflows, resulting in allocation or buffer access with an extremely large wrapped-around size value.\u003c/p\u003e\u003cp\u003eThe underflow can be triggered remotely via network traffic destined for the filtered port, or locally via crafted data provided to the filtering interface. The resulting memory allocation failure or out-of-bounds access causes a kernel panic and system crash.\u003c/p\u003e"
            }
          ],
          "value": "An integer underflow vulnerability in the Avast Windows Filtering Platform (WFP) stream parser on Windows allows denial of service by causing a system crash.\n\n\n\nThe WFP callout driver processes network stream data and computes length values for packet fragment reassembly. The length calculation does not properly validate input stream sizes against expected boundaries. When processing specially crafted input, the length computation underflows, resulting in allocation or buffer access with an extremely large wrapped-around size value.\n\n\n\nThe underflow can be triggered remotely via network traffic destined for the filtered port, or locally via crafted data provided to the filtering interface. The resulting memory allocation failure or out-of-bounds access causes a kernel panic and system crash."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "A local or remote attacker can trigger a system crash via denial of service by sending specially crafted network traffic that causes an integer underflow in the Windows Filtering Platform stream parser."
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-191",
              "description": "CWE-191: Integer Underflow (Wrap or Wraparound)",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-248",
              "description": "CWE-248: Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-06T15:59:24.348Z",
        "orgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e",
        "shortName": "GEN"
      },
      "references": [
        {
          "name": "Gen Digital Security Advisories",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.gendigital.com/us/en/contact-us/security-advisories/"
        },
        {
          "name": "Avast: how to update Avast Antivirus or Avast One",
          "tags": [
            "patch"
          ],
          "url": "https://support.avast.com/en-us/article/Update-Antivirus"
        },
        {
          "name": "AVG: updating AVG AntiVirus",
          "tags": [
            "patch"
          ],
          "url": "https://support.avg.com/SupportArticleView?l=en\u0026urlname=Update-AVG-Antivirus"
        },
        {
          "name": "Norton: keep your Norton device security up to date",
          "tags": [
            "patch"
          ],
          "url": "https://support.norton.com/sp/en/us/home/current/solutions/v20240108175512167"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eGen Digital has released a fix in Avast, AVG, and Norton version \u003cstrong\u003e26.7 and later\u003c/strong\u003e. The fix adds input validation to the WFP stream parser length computation to detect and reject underflow conditions before they can result in memory allocation or access with invalid sizes.\u003c/p\u003e\u003cp\u003eUpgrade to version \u003cstrong\u003e26.7 or later\u003c/strong\u003e to remediate this issue.\u003c/p\u003e"
            }
          ],
          "value": "Gen Digital has released a fix in Avast, AVG, and Norton version 26.7 and later. The fix adds input validation to the WFP stream parser length computation to detect and reject underflow conditions before they can result in memory allocation or access with invalid sizes.\n\n\n\nUpgrade to version 26.7 or later to remediate this issue."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Avast WFP stream parser integer underflow causes system crash",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e",
    "assignerShortName": "GEN",
    "cveId": "CVE-2026-80303",
    "datePublished": "2026-11-06T15:59:24.348Z",
    "dateReserved": "2026-08-26T08:11:54.260Z",
    "dateUpdated": "2026-11-06T15:59:24.348Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}