Heap-based Buffer Overflow in Avast Antivirus for MacOS
CVE-2025-10101

8.1HIGH

Key Information:

Vendor

Avast

Status
Antivirus
Vendor
CVE Published:
1 December 2025

What is CVE-2025-10101?

A heap-based buffer overflow vulnerability exists in Avast Antivirus for MacOS, triggered by the processing of a specially crafted Mach-O file. This flaw could potentially allow an unauthorized local execution of arbitrary code, or result in a Denial of Service, impacting the antivirus software's ability to protect the system. Versions of Avast Antivirus prior to 3.9.2025 are at risk, necessitating immediate updates to mitigate this security concern.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Antivirus MacOS 15.7

References

https://www.gendigital.com/us/en/contact-us/security-advi...

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mike Zhang
JSON
.