This vulnerability (CVE-2025-7006) is a CWE-590 type use-after-free issue involving stack memory in the Avast Antivirus scanning engine. When scanning a specially crafted Windows PE file, the antivirus process may attempt to use stack memory that has already been freed, leading to a denial-of-service condition. The vulnerability affects multiple Gen Digital antivirus products including Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus across Windows, macOS, and Linux platforms. The affected scanning logic is distributed via a shared virus definition update stream. Virus definition builds before VPS 25022500 are vulnerable, while builds at or above this version are not.

Successful exploitation can cause denial-of-service of the antivirus process by triggering use of freed stack memory during scanning of malformed Windows PE files. There is no impact on confidentiality or integrity reported. The vulnerability affects the availability of the antivirus process, potentially reducing endpoint protection effectiveness during the DoS condition.

The vulnerability is mitigated by updating virus definitions to build VPS 25022500 or later. Installations with virus definition builds at or above VPS 25022500 are not vulnerable. Since the scanning logic is delivered through a shared virus definition update stream, ensuring the antivirus product is updated to the latest virus definitions effectively remediates this issue. No additional vendor advisory or patch information is provided, so users should verify their virus definition build version and update accordingly.