CVE-2016-10402: Avira Antivirus

High severity, CVSS 7.8. EPSS: 10.2% chance of exploitation in the next 30 days.

Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer overflow and heap-based buffer underflow.

Affected products

• Avira Antivirus: up to and including 8.3.36.59

Published 2017-07-27. Last modified 2026-06-17.