Heap Buffer Out-of-Bounds Write Vulnerability in Avast Antivirus Products

CVE-2025-7004

What is CVE-2025-7004?

A vulnerability exists in Avast Antivirus that leads to a heap buffer out-of-bounds write when scanning malformed Windows PE files. This flaw can potentially allow for local code execution or cause a denial-of-service condition within the antivirus process. The issue affects several Gen Digital products, including AVG Antivirus and Norton Antivirus, across different operating systems such as Windows, macOS, and Linux, specifically in versions with virus definitions prior to VPS 25040308. It's critical to update to the latest virus definitions to mitigate this risk, as the affected scanning logic is shared between these products.

References