CVE-2025-7017: Avira antivirus engine heap buffer OOB read when scanning a malformed Windows MSI file
Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.
This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.56.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Avira Antivirus engineto a version that resolves this vulnerability.Fixed in 8.3.70.56
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7017?
CVE-2025-7017 has a severity rating of 7.8, categorized as high.
How do I fix CVE-2025-7017?
To fix CVE-2025-7017, upgrade to Avira scan engine build 8.3.70.56 or any later version.
What systems are affected by CVE-2025-7017?
CVE-2025-7017 affects Avira Antivirus on Windows, macOS, and Linux for engine builds prior to 8.3.70.56.
What type of vulnerability is CVE-2025-7017?
CVE-2025-7017 is a heap buffer out-of-bounds read vulnerability that can lead to code execution or denial-of-service.
Can CVE-2025-7017 be exploited remotely?
CVE-2025-7017 requires local access to exploit, as the vulnerability occurs during the scanning of malformed files.