NULL Pointer Dereference Vulnerability in Avast Antivirus for MacOS and Linux
CVE-2025-7007

7.5HIGH

Key Information:

Vendor

Avast

Status
Antivirus
Anitvirus
Vendor
CVE Published:
1 December 2025

What is CVE-2025-7007?

A NULL Pointer Dereference vulnerability has been identified in Avast Antivirus versions for both MacOS and Linux. This issue arises during the scanning of malformed Windows PE files, leading to a crash of the antivirus process. Users of Avast Antivirus on MacOS and Linux should be aware of this vulnerability to ensure their systems remain secure while the manufacturer works on a resolution.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Anitvirus Linux 3.0.3

Antivirus MacOS 16.0.0

References

https://www.gendigital.com/us/en/contact-us/security-advi...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mike Zhang
JSON
.