CVE-2025-7004

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to VPS 25040308 AVG Antivirus versions prior to VPS 25040308 Norton Antivirus versions prior to VPS 25040308 Avast One versions prior to VPS 25040308 Avast Business Antivirus versions prior to VPS 25040308

Description A heap buffer out-of-bounds write occurs when scanning a malformed Windows PE file. This issue can lead to local execution of code or a denial-of-service of the antivirus process. The flaw exists within the scanning logic delivered via a shared Gen Digital virus definition update stream used across multiple products on Windows, macOS, and Linux.

Recommendations Update to virus definition build VPS 25040308 or later for all affected products.