CVE-2025-14098: Avira antivirus engine heap buffer OOB write when scanning a malformed MS-DOS executable file
Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malformed MS-DOS executable file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.
This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.104.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Avira Antivirus engineto a version that resolves this vulnerability.Fixed in 8.3.70.104
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14098?
The severity of CVE-2025-14098 is high with a score of 7.8.
How do I fix CVE-2025-14098?
To fix CVE-2025-14098, upgrade to Avira scan engine build 8.3.70.104 or any later release.
What impact does CVE-2025-14098 have on systems?
CVE-2025-14098 may allow local execution of code or cause a denial-of-service on the Avira antivirus engine process.
Which platforms are affected by CVE-2025-14098?
CVE-2025-14098 affects Avira Antivirus on Windows, macOS, and Linux.
What type of vulnerability is CVE-2025-14098?
CVE-2025-14098 is a heap buffer out-of-bounds write vulnerability caused by an integer overflow.