Kernel memory corruption via integer overflow

Integer overflow in Kaspersky Anti-Virus SDK and Security for Virtualization Light Agent allows local users to corrupt kernel memory. Kaspersky identifies an integer overflow but does not disclose the affected kernel component; the resulting operation writes into a limited area beyond its allocated buffer. A local authenticated account is required, and Kaspersky reports limited data alteration and possible service interruption without disclosing additional triggering conditions.