CVE-2025-7011

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions 25020100 through 25021207 AVG Antivirus versions 25020100 through 25021207 Norton Antivirus versions 25020100 through 25021207 Avast One versions 25020100 through 25021207 Avast Business Antivirus versions 25020100 through 25021207

Description A heap out-of-bounds read occurs when scanning a malformed zip file containing XML. This issue can lead to local execution of code or a denial-of-service of the antivirus process. The flaw exists within the shared Gen Digital virus definition update stream used across multiple products on Windows, macOS, and Linux.

Recommendations Update to virus definition build 25021208 or later for Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus.