CVE-2025-7002: Avira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 2)
Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.
This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.68.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Avira Antivirus engineto a version that resolves this vulnerability.Fixed in 8.3.70.68
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7002?
The severity of CVE-2025-7002 is rated as high, with a score of 7.8.
How do I fix CVE-2025-7002?
To fix CVE-2025-7002, upgrade to Avira scan engine build 8.3.70.68 or any later release.
What types of systems are affected by CVE-2025-7002?
CVE-2025-7002 affects Avira Antivirus on Windows, macOS, and Linux systems.
What are the potential impacts of CVE-2025-7002?
CVE-2025-7002 may allow local execution of code or lead to a denial-of-service of the antivirus engine process.
What triggers the vulnerability in CVE-2025-7002?
The vulnerability in CVE-2025-7002 is triggered when the Avira antivirus engine scans a malformed PDF file.