CVE-2020-10180: The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security…

PriorityP348critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

1.65%

73.5th percentile

The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
eset	cyber_security	< 1294	1294
eset	mobile_security	< 1294	1294
eset	nod32_antivirus	< 1294	1294
eset	nod32_antivirus	—	—
eset	smart_security	< 1294	1294
eset	smart_tv_security	< 1294	1294

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.