Read the docs
TI-2025-06378 Aliases CVE-2025-7011GHSA-j95q-6549-w3j4

Avast antivirus heap OOB when scanning a malformed zip file

Priority LOW 35CWE-125Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Heap out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed zip file containing XML may allow Local Execution of Code or Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds from 25020100 before 25021208. The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00146 3rd percentileScored 2026-11-07
Fix Fixed Avast Antivirus (Gen Digital): 25021208AVG Antivirus (Gen Digital): 25021208+3 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Gen DigitalAvast Antivirus25020100 to before 2502120825021208Patch availableCNA
Gen DigitalAVG Antivirus25020100 to before 2502120825021208Patch availableCNA
Gen DigitalNorton Antivirus25020100 to before 2502120825021208Patch availableCNA
Gen DigitalAvast One25020100 to before 2502120825021208Patch availableCNA
Gen DigitalAvast Business Antivirus25020100 to before 2502120825021208Patch availableCNA
  • Avast Antivirus VendorGen Digital Affected 25020100 to before 25021208 Fixed in 25021208 Patch available CNA
  • AVG Antivirus VendorGen Digital Affected 25020100 to before 25021208 Fixed in 25021208 Patch available CNA
  • Norton Antivirus VendorGen Digital Affected 25020100 to before 25021208 Fixed in 25021208 Patch available CNA
  • Avast One VendorGen Digital Affected 25020100 to before 25021208 Fixed in 25021208 Patch available CNA
  • Avast Business Antivirus VendorGen Digital Affected 25020100 to before 25021208 Fixed in 25021208 Patch available CNA

Remediation

  • Fix · CNA Avast Antivirus (Gen Digital) Fixed in 25021208
  • Fix · CNA AVG Antivirus (Gen Digital) Fixed in 25021208
  • Fix · CNA Norton Antivirus (Gen Digital) Fixed in 25021208
  • Fix · CNA Avast One (Gen Digital) Fixed in 25021208
  • Fix · CNA Avast Business Antivirus (Gen Digital) Fixed in 25021208

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Gen Digital AVG Antivirus, Avast Antivirus and 3 more products 25021208

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2025-06377 Avast antivirus stack overflow when scanning a malformed PDF filePriority LOW 24
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-7011
  2. 2026-10-03 Alias added: GHSA-j95q-6549-w3j4

References

Other 1

  • TI-2026-57223 Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sys CVSS 3.1HIGH 8.8
  • TI-2026-22110 Avira Internet Security Optimizer TOCTOU CVSS 3.1HIGH 7.8
  • TI-2026-22109 Avira Internet Security System Speedup Insecure Deserialization CVSS 3.1HIGH 7.8
  • TI-2026-22108 Avira Internet Security Arbitrary File Deletion via Improper Link Resolution CVSS 3.1HIGH 7.8
  • TI-2015-06072 Use-after-free vulnerability in the Update Manager service in Avira Management Console… CVSS 2.0HIGH 10.0
  • TI-2023-18488 An issue was discovered in Avira Phantom VPN through 2.23.1 for macOS. CVSS 3.1HIGH 7.3
See all 69 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences