CVE-2025-7009: CWE-125 Out-of-bounds Read in Gen Digital Avast Antivirus
Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds before VPS 25021310. The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.
AI Analysis
Technical Summary
This vulnerability (CVE-2025-7009) involves a heap buffer out-of-bounds read in the scanning engine of Gen Digital's Avast Antivirus and related products. The flaw occurs when processing malformed Windows PE files, potentially leading to local code execution or denial-of-service conditions. The affected products include Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus across Windows, macOS, and Linux platforms. The vulnerability is tied to virus definition builds before VPS 25021310. The shared virus definition update stream delivers the vulnerable scanning logic, and updating virus definitions to VPS 25021310 or later mitigates the issue regardless of the specific product.
Potential Impact
Successful exploitation can lead to local execution of code or denial-of-service of the antivirus process. This could compromise system security or disrupt antivirus functionality. The vulnerability affects confidentiality, integrity, and availability as indicated by the CVSS vector (C:H/I:H/A:H).
Mitigation Recommendations
Updating virus definitions to version VPS 25021310 or later fully mitigates this vulnerability. Since the scanning engine is updated via the virus definition update stream, ensuring antivirus products receive and apply these updates is critical. No additional vendor advisory or patch information is provided, but the update of virus definitions is the effective remediation.
CVE-2025-7009: CWE-125 Out-of-bounds Read in Gen Digital Avast Antivirus
Description
Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds before VPS 25021310. The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.
CVSS v3.1
Score 7.8high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2025-7009) involves a heap buffer out-of-bounds read in the scanning engine of Gen Digital's Avast Antivirus and related products. The flaw occurs when processing malformed Windows PE files, potentially leading to local code execution or denial-of-service conditions. The affected products include Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus across Windows, macOS, and Linux platforms. The vulnerability is tied to virus definition builds before VPS 25021310. The shared virus definition update stream delivers the vulnerable scanning logic, and updating virus definitions to VPS 25021310 or later mitigates the issue regardless of the specific product.
Potential Impact
Successful exploitation can lead to local execution of code or denial-of-service of the antivirus process. This could compromise system security or disrupt antivirus functionality. The vulnerability affects confidentiality, integrity, and availability as indicated by the CVSS vector (C:H/I:H/A:H).
Mitigation Recommendations
Updating virus definitions to version VPS 25021310 or later fully mitigates this vulnerability. Since the scanning engine is updated via the virus definition update stream, ensuring antivirus products receive and apply these updates is critical. No additional vendor advisory or patch information is provided, but the update of virus definitions is the effective remediation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GEN
- Date Reserved
- 2025-07-02T07:50:52.477Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a2c871ae617e2d834ccce1f
Added to database: 06/12/2026, 22:24:26 UTC
Last enriched: 06/20/2026, 16:03:10 UTC
Last updated: 07/31/2026, 19:22:56 UTC
Views: 62
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.