An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The vulnerability allows local users to take control of arbitrary files.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13657
Reference (s):
- https://forum.avast.com/index.php?topic=232423.0
- https://forum.avast.com/index.php?topic=234638.0