Heap Buffer Out-of-Bounds Read Vulnerability in Avira Antivirus
CVE-2025-7003

7.8HIGH

Key Information:

Vendor

Gen Digital

Status
Avira Antivirus
Vendor
CVE Published:
12 June 2026

What is CVE-2025-7003?

A heap buffer out-of-bounds read vulnerability exists in the Avira Antivirus engine, which may be triggered when scanning a specially crafted PDF file. This flaw can lead to local execution of code or disrupt the antivirus engine process, potentially compromising system security. The issue affects various platforms, including Windows, macOS, and Linux, particularly in versions prior to engine build 8.3.70.56.

Affected Version(s)

Avira Antivirus Windows 0

References

https://www.gendigital.com/us/en/contact-us/security-advi...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mike Zhang, an independent security researcher
.