Heap-Based Buffer Overflow in Avast Antivirus on MacOS
CVE-2025-8351

9CRITICAL

Key Information:

Vendor

Avast

Status
Antivirus
Vendor
CVE Published:
1 December 2025

What is CVE-2025-8351?

A vulnerability exists in Avast Antivirus on MacOS that triggers a heap-based buffer overflow when scanning a specially crafted file. This flaw could lead to local code execution or cause a Denial-of-Service, impacting the antivirus engine's process. The issue resides in versions 8.3.70.94 through 8.3.70.98, making it crucial for users to upgrade to the latest version to mitigate potential risks.

Affected Version(s)

Antivirus MacOS 8.3.70.94

References

https://www.gendigital.com/us/en/contact-us/security-advi...

CVSS V3.1

Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mike Zhang
JSON
.