CVE-2025-9032: Avira antivirus engine heap buffer OOB read when scanning a malformed PE file
Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.
This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.98.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Avira scan engineto a version that resolves this vulnerability.Fixed in 8.3.70.98
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9032?
CVE-2025-9032 has a high severity rating of 7.8.
How do I fix CVE-2025-9032?
To remediate CVE-2025-9032, upgrade to Avira scan engine build 8.3.70.98 or any later version.
What systems are affected by CVE-2025-9032?
CVE-2025-9032 affects Avira Antivirus on Windows, macOS, and Linux for engine builds prior to 8.3.70.98.
What type of vulnerability is CVE-2025-9032?
CVE-2025-9032 is a heap buffer out-of-bounds read vulnerability.
What can CVE-2025-9032 lead to if exploited?
Exploitation of CVE-2025-9032 may allow local execution of code or cause a denial-of-service condition in the antivirus engine process.