CVE-2025-9033: Avira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 3)
Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.
This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.76.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Avira Antivirus engineto a version that resolves this vulnerability.Fixed in 8.3.70.76
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9033?
The severity of CVE-2025-9033 is high with a score of 7.8.
How do I fix CVE-2025-9033?
To fix CVE-2025-9033, upgrade to Avira scan engine build 8.3.70.76 or any later release.
What systems are affected by CVE-2025-9033?
CVE-2025-9033 affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.76.
What type of vulnerability is CVE-2025-9033?
CVE-2025-9033 is a heap buffer out-of-bounds read vulnerability.
What can happen if CVE-2025-9033 is exploited?
Exploitation of CVE-2025-9033 may lead to local execution of code or denial-of-service of the antivirus engine process.