PT-2026-49019
CVE-2025-7019
·
Published
2026-06-12
·
Updated
2026-09-30
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Avast Antivirus versions prior to VPS 25020100
AVG Antivirus versions prior to VPS 25020100
Norton Antivirus versions prior to VPS 25020100
Avast One versions prior to VPS 25020100
Avast Business Antivirus versions prior to VPS 25020100
Description
A stack overflow occurs when scanning a malformed Office Open XML file, which can lead to a Denial-of-Service of the antivirus process. This issue stems from shared scanning logic delivered through a Gen Digital virus definition update stream used across multiple products on Windows, macOS, and Linux.
Recommendations
Update to virus definition build VPS 25020100 or later for all affected products.
Found an issue in the description? Have something to add? Feel free to write us 👾