This vulnerability (CVE-2025-7017) involves a heap buffer out-of-bounds read in the Avira Antivirus engine triggered by scanning a malformed Windows MSI file. The flaw can allow an attacker with local access to execute code or cause a denial-of-service condition in the antivirus engine process. It impacts Avira Antivirus on Windows, macOS, and Linux for engine builds prior to 8.3.70.56. No official patch or remediation level has been published yet, and no known exploits are reported in the wild.

Successful exploitation may result in local code execution or denial-of-service of the antivirus engine process, potentially compromising system security or availability. The vulnerability requires local access and user interaction to trigger (user must initiate scanning).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid scanning untrusted or malformed Windows MSI files locally. Monitor vendor communications for updates on patches or official mitigations.