Heap-based Buffer Overflow in Avast Antivirus for MacOS

CVE-2025-10101

What is CVE-2025-10101?

A heap-based buffer overflow vulnerability exists in Avast Antivirus for MacOS, triggered by the processing of a specially crafted Mach-O file. This flaw could potentially allow an unauthorized local execution of arbitrary code, or result in a Denial of Service, impacting the antivirus software's ability to protect the system. Versions of Avast Antivirus prior to 3.9.2025 are at risk, necessitating immediate updates to mitigate this security concern.

References