Heap-based Buffer Overflow in Avast Antivirus for MacOS
CVE-2025-10101

7.8HIGH

Key Information:

Vendor

Gen Digital

Status
Avast Antivirus
Avg Antivirus
Norton Antivirus
Avast One
Vendor
CVE Published:
1 December 2025

What is CVE-2025-10101?

A heap-based buffer overflow vulnerability exists in Avast Antivirus for MacOS, triggered by the processing of a specially crafted Mach-O file. This flaw could potentially allow an unauthorized local execution of arbitrary code, or result in a Denial of Service, impacting the antivirus software's ability to protect the system. Versions of Avast Antivirus prior to 3.9.2025 are at risk, necessitating immediate updates to mitigate this security concern.

Affected Version(s)

Avast Antivirus Windows 0

Avast Business Antivirus Windows 0

Avast One Windows 0

References

https://www.gendigital.com/us/en/contact-us/security-advi...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mike Zhang
.