CVE-2025-9032: falha de alta gravidade em Gen Digital Avira Antivirus
Avira antivirus engine heap buffer OOB read when scanning a malformed PE file
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 0.1%
Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.
This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.98.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Gen Digital · Avira AntivirusCVEs relacionadas — Gen Digital Avira Antivirus
No mesmo produto, das mais perigosas para as menos.
CVE-2025-8351HIGHAvira antivirus engine heap buffer OOB read when scanning a malformed fileEPSS 0.2%CVE-2025-7017HIGHAvira antivirus engine heap buffer OOB read when scanning a malformed Windows MSI fileEPSS 0.1%CVE-2025-7003HIGHAvira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 1)EPSS 0.1%CVE-2025-7002HIGHAvira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 2)EPSS 0.1%CVE-2026-6676HIGHAvira antivirus engine heap buffer OOB write when scanning a malformed POSIX tar archiveEPSS 0.1%CVE-2025-14098HIGHAvira antivirus engine heap buffer OOB write when scanning a malformed MS-DOS executable fileEPSS 0.1%