PT-2025-48473

CVE-2025-10101

Published

2025-12-01

Updated

2026-06-13

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions 15.7 through 3.9.2025

Description A flaw exists in Avast Antivirus on MacOS that involves a heap-based buffer overflow and out-of-bounds write condition. Processing a specially crafted Mach-O file could lead to local code execution or a denial of service, impacting the antivirus protection.

Recommendations Update Avast Antivirus to a version later than 3.9.2025.

Exploitability

Fix

Impacts

Researchers

Mike Zhang

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

CWE-787: Out-of-bounds Write

CWE-122: Heap-based Buffer Overflow