Heap Buffer Out-of-Bounds Read Vulnerability in Avira Antivirus
CVE-2025-7002

7.8HIGH

Key Information:

Vendor

Gen Digital

Status
Avira Antivirus
Vendor
CVE Published:
12 June 2026

What is CVE-2025-7002?

A heap buffer out-of-bounds read vulnerability exists in the Avira Antivirus engine when it scans specifically crafted malformed PDF files. This flaw may allow an attacker to perform local execution of code or achieve a denial-of-service condition on the antivirus engine process, potentially exposing users to security risks. It affects the engine builds prior to 8.3.70.68 on Windows, macOS, and Linux platforms.

Affected Version(s)

Avira Antivirus Windows 0

References

https://www.gendigital.com/us/en/contact-us/security-advi...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mike Zhang, an independent security researcher
.