Heap Buffer Out-of-Bounds Read Vulnerability in Avira Antivirus Engine

CVE-2025-7017

What is CVE-2025-7017?

A heap buffer out-of-bounds read vulnerability exists in the Avira Antivirus engine, triggered when scanning a specially crafted malformed Windows MSI file. This flaw could be exploited to execute local code or potentially lead to a denial-of-service condition, affecting the stability and security of the antivirus process. Users on Windows, macOS, and Linux with engine builds prior to version 8.3.70.56 are particularly susceptible to this issue, necessitating prompt updates to protect against potential exploits.

References