CVE-2025-7005

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to VPS 25031700 AVG Antivirus versions prior to VPS 25031700 Norton Antivirus versions prior to VPS 25031700 Avast One versions prior to VPS 25031700 Avast Business Antivirus versions prior to VPS 25031700

Description An uncontrolled recursion issue occurs when scanning a malformed Windows PE (Portable Executable) file, which can lead to a Denial-of-Service of the antivirus process. This flaw exists within the scanning logic delivered via a shared Gen Digital virus definition update stream used across multiple products on Windows, macOS, and Linux.

Recommendations Update to virus definition build VPS 25031700 or later for all affected products.