CVE-2025-7003: Avira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 1)
Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.
This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.56.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Avira Antivirus engineto a version that resolves this vulnerability.Fixed in 8.3.70.56
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7003?
The severity of CVE-2025-7003 is high, with a score of 7.8.
How do I fix CVE-2025-7003?
To fix CVE-2025-7003, upgrade to Avira scan engine build 8.3.70.56 or later.
What impact does CVE-2025-7003 have on systems?
CVE-2025-7003 may allow local execution of code or cause a denial-of-service on the antivirus engine process.
Which platforms are affected by CVE-2025-7003?
CVE-2025-7003 affects Avira Antivirus on Windows, macOS, and Linux.
What is the nature of the vulnerability CVE-2025-7003?
CVE-2025-7003 is a heap buffer out-of-bounds read vulnerability that occurs when scanning a malformed PDF file.