CVE-2025-7009

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to VPS 25021310 AVG Antivirus versions prior to VPS 25021310 Norton Antivirus versions prior to VPS 25021310 Avast One versions prior to VPS 25021310 Avast Business Antivirus versions prior to VPS 25021310

Description A heap buffer out-of-bounds read occurs when scanning a malformed Windows PE file. This issue can lead to local execution of code or a denial-of-service of the antivirus process. The flaw exists within the shared Gen Digital virus definition update stream used across multiple products.

Recommendations Update to virus definition build VPS 25021310 or later for all affected products.