NULL Pointer Dereference Vulnerability in Avast Antivirus for MacOS and Linux

CVE-2025-7007

What is CVE-2025-7007?

A NULL Pointer Dereference vulnerability has been identified in Avast Antivirus versions for both MacOS and Linux. This issue arises during the scanning of malformed Windows PE files, leading to a crash of the antivirus process. Users of Avast Antivirus on MacOS and Linux should be aware of this vulnerability to ensure their systems remain secure while the manufacturer works on a resolution.

References