CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2
Summary
Technical deep-dive into CVE-2025-13032, detailing Avast kernel driver double-fetch exploit, paged pool overflow, and a chain to arbitrary kernel read/write and SYSTEM privilege escalation. Includes heap spraying, MDL-based leaks, and token theft, with patch guidance.