CVE-2020-9399: Avast Antivirus For Linux

Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antivirus Pro, Antivirus Pro Plus, and Antivirus for Linux.

Affected products

• Avast Antivirus For Linux: before 12.0 (fixed in 12.0)
• Avast Antivirus Pro: before 12.0 (fixed in 12.0)
• Avast Antivirus Pro Plus: before 12.0 (fixed in 12.0)

Published 2020-02-28. Last modified 2026-06-17.