CVE-2025-8351 in Avast

Résumé

par MITRE • 01/12/2025

Heap-based Buffer Overflow, Out-of-bounds Read vulnerability in Avira Antivirus engine when scanning a malformed file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.

This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.98.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsable: NLOK
• Réserver: 30/07/2025
• Divulgation: 01/12/2025
• Modérer: accepté
• Entrée: VDB-333889
• CPE: prêt
• CWE: CWE-122 (confirmé)
• CVSS: 7.8 (CNA)
• EPSS: 0.00160
• KEV: non
• Activités: très faible
• Secteur: Government, Insurance, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-8351
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-8351
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-8351/