Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, Avast Business Antivirus vulnerabilities

A stack overflow vulnerability in Avast Antivirus when scanning a malformed Office Open XML file may allow Denial-of-Service of the antivirus process.

A heap out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed zip file containing XML may allow Local Execution of Code or Denial-of-Service of the antivirus process.

A stack overflow vulnerability due to uncontrolled recursion in Avast Antivirus when scanning a malformed PDF file may allow Denial-of-Service of the antivirus process.

CVE-2025-7009 describes a heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file, which may allow Local Execution of Code or Denial-of-Service of the antivirus process.

CVE-2025-7008 describes a heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file with .NET metadata, which may allow Local Execution of Code or Denial-of-Service of the antivirus process.

The vulnerability in Avast Antivirus involves the use of stack memory after it has been freed when scanning a malformed Windows PE file, which may lead to a denial-of-service of the antivirus process.

There is an uncontrolled recursion vulnerability in Avast Antivirus when scanning a malformed Windows PE file, which may lead to a Denial-of-Service of the antivirus process.

Avast Antivirus has a heap buffer out-of-bounds write vulnerability when scanning a malformed Windows PE file, which may allow Local Execution of Code or Denial-of-Service of the antivirus process.

A heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Mach-O file may allow Local Execution of Code or Denial-of-Service of the antivirus process.