Stack Overflow Vulnerability in Avast Antivirus and Related Products

CVE-2025-7019

What is CVE-2025-7019?

A stack overflow vulnerability exists in Avast Antivirus and various Gen Digital products when they scan malformed Office Open XML files. This issue can lead to a Denial-of-Service condition for the antivirus process. Affected products include Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on multiple operating systems such as Windows, macOS, and Linux. The vulnerability arises from the shared Gen Digital virus definition update stream, which supplies the scanning logic. It is critical for users to ensure their installations are updated to virus definition builds like VPS 25020100 or higher to mitigate this risk.

References