CVE-2025-7019: Avast antivirus stack overflow when scanning a malformed Office Open XML file
Stack overflow vulnerability in Avast Antivirus when scanning a malformed Office Open XML file may allow Denial-of-Service of the antivirus process.
This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds before VPS 25020100.
The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Gen Digital virus definition update streamto a version that resolves this vulnerability.Fixed in VPS 25020100 - Operational
Install virus definitions VPS 25020100 or any later virus-definition update for Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux. Stay current on virus-definition updates (all builds at or above VPS 25020100 include the fix).
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7019?
The severity of CVE-2025-7019 is classified as medium with a score of 5.5.
What impact does CVE-2025-7019 have on users?
CVE-2025-7019 can cause a Denial-of-Service condition in the antivirus process when scanning a malformed Office Open XML file.
How do I fix CVE-2025-7019?
To fix CVE-2025-7019, install virus definitions VPS 25020100 or any later updates that include the fix.
Which antivirus products are affected by CVE-2025-7019?
CVE-2025-7019 affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus.
On which operating systems does CVE-2025-7019 occur?
CVE-2025-7019 occurs on Windows, macOS, and Linux platforms.