CVE-2025-7006

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to VPS 25022500 AVG Antivirus versions prior to VPS 25022500 Norton Antivirus versions prior to VPS 25022500 Avast One versions prior to VPS 25022500 Avast Business Antivirus versions prior to VPS 25022500

Description A use-after-free vulnerability occurs in the stack memory when scanning a malformed Windows PE (Portable Executable) file, which is a file format used by Windows for executables, DLLs, and drivers. This flaw can lead to a Denial-of-Service of the antivirus process.

Recommendations Update to virus definition build VPS 25022500 or later for all affected products.