CVE-2025-7004: CWE-787 Out-of-bounds Write in Gen Digital Avast Antivirus
CVE-2025-7004 is a heap buffer out-of-bounds write vulnerability in Avast Antivirus and related Gen Digital antivirus products when scanning malformed Windows PE files. This flaw may allow local attackers to execute code or cause a denial-of-service condition in the antivirus process. The vulnerability affects multiple Gen Digital antivirus products on Windows, macOS, and Linux platforms prior to virus definition build VPS 25040308. The scanning logic is shared across these products via a common virus definition update stream. Versions at or above VPS 25040308 are not vulnerable.
AI Analysis
Technical Summary
This vulnerability (CVE-2025-7004) involves a heap buffer out-of-bounds write in the scanning engine used by Gen Digital's antivirus products, including Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus. The issue occurs when scanning a malformed Windows PE file and can lead to local code execution or denial-of-service of the antivirus process. The affected scanning logic is delivered through a shared virus definition update stream. The vulnerability is mitigated by updating virus definitions to build VPS 25040308 or later, which are not vulnerable regardless of the product consuming the stream.
Potential Impact
Successful exploitation can result in local code execution or denial-of-service of the antivirus process, potentially compromising system security or availability. The vulnerability affects multiple antivirus products across Windows, macOS, and Linux platforms before virus definition build VPS 25040308.
Mitigation Recommendations
Updating virus definitions to build VPS 25040308 or later mitigates this vulnerability. Installations at or above this virus definition build are not vulnerable. No additional vendor advisory or patch information is provided, so users should ensure their virus definitions are current to remediate this issue.
CVE-2025-7004: CWE-787 Out-of-bounds Write in Gen Digital Avast Antivirus
Description
CVE-2025-7004 is a heap buffer out-of-bounds write vulnerability in Avast Antivirus and related Gen Digital antivirus products when scanning malformed Windows PE files. This flaw may allow local attackers to execute code or cause a denial-of-service condition in the antivirus process. The vulnerability affects multiple Gen Digital antivirus products on Windows, macOS, and Linux platforms prior to virus definition build VPS 25040308. The scanning logic is shared across these products via a common virus definition update stream. Versions at or above VPS 25040308 are not vulnerable.
CVSS v3.1
Score 7.8high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2025-7004) involves a heap buffer out-of-bounds write in the scanning engine used by Gen Digital's antivirus products, including Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus. The issue occurs when scanning a malformed Windows PE file and can lead to local code execution or denial-of-service of the antivirus process. The affected scanning logic is delivered through a shared virus definition update stream. The vulnerability is mitigated by updating virus definitions to build VPS 25040308 or later, which are not vulnerable regardless of the product consuming the stream.
Potential Impact
Successful exploitation can result in local code execution or denial-of-service of the antivirus process, potentially compromising system security or availability. The vulnerability affects multiple antivirus products across Windows, macOS, and Linux platforms before virus definition build VPS 25040308.
Mitigation Recommendations
Updating virus definitions to build VPS 25040308 or later mitigates this vulnerability. Installations at or above this virus definition build are not vulnerable. No additional vendor advisory or patch information is provided, so users should ensure their virus definitions are current to remediate this issue.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GEN
- Date Reserved
- 2025-07-02T07:42:38.625Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a2c871ae617e2d834ccce13
Added to database: 6/12/2026, 10:24:26 PM
Last enriched: 6/12/2026, 10:39:38 PM
Last updated: 6/13/2026, 4:27:45 AM
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.