CVE-2009-4049: Avast Antivirus Home

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024.

Affected products

• Avast Avast Antivirus Home: version 4.8.1356.0 only
• Avast Avast Antivirus Professional: version 4.8.1356.0 only

Published 2009-11-23. Last modified 2026-06-16.