CVE-2025-8351
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A heap-based buffer overflow and out-of-bounds read vulnerability in the Avira Antivirus engine may allow local execution of code or denial-of-service of the antivirus engine process when scanning a malformed file.
Risk Assessment
This vulnerability could lead to serious security threats, including unauthorized access to the system or disruption of antivirus software functionality.
Recommendation
It is recommended to update the Avira Antivirus engine to version 8.3.70.98 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Avira Antivirus engine
See all- CVE-2025-7018Medium
CVE-2025-7018 involves a null pointer dereference vulnerability in the Avira Antivirus engine when scanning a malformed Windows PE file, potentially leading to a Denial-of-Service of the antivirus engine process.
- CVE-2025-7017High
CVE-2025-7017 is a heap buffer out-of-bounds read vulnerability in the Avira Antivirus engine when scanning a malformed Windows MSI file. This may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.
- CVE-2025-7003High
A heap buffer out-of-bounds read vulnerability exists in the Avira Antivirus engine when scanning a malformed PDF file. This may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.
- CVE-2025-7002High
CVE-2025-7002 describes a heap buffer out-of-bounds read vulnerability in the Avira Antivirus engine that may occur when scanning a malformed PDF file. This may allow local code execution or denial-of-service of the antivirus engine process.
Original NVD description (English source)
Heap-based Buffer Overflow, Out-of-bounds Read vulnerability in Avira Antivirus engine when scanning a malformed file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.98.