CVE-2025-7018: Avira antivirus engine null pointer dereference when scanning a malformed PE file
Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus engine process.
This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.64.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Avira scan engineto a version that resolves this vulnerability.Fixed in 8.3.70.64
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7018?
The severity of CVE-2025-7018 is medium with a score of 5.5.
How do I fix CVE-2025-7018?
To fix CVE-2025-7018, upgrade to Avira scan engine build 8.3.70.64 or any later engine release.
What systems are affected by CVE-2025-7018?
CVE-2025-7018 affects Avira Antivirus on Windows, macOS, and Linux for engine builds prior to 8.3.70.64.
What kind of vulnerability is CVE-2025-7018?
CVE-2025-7018 is a null pointer dereference vulnerability.
What is the potential impact of CVE-2025-7018?
CVE-2025-7018 may allow denial-of-service of the antivirus engine process.