ByteOS Network

CVE Vulnerability Details :

CVE-2025-7018

PUBLISHED

More Info Official Page

Assigner-GEN

Assigner Org ID-dbd8429d-f261-4b1e-94cc-ae3132817e2e

Published At-12 Jun, 2026 | 22:13

Updated At-12 Jun, 2026 | 22:13

▼CVE Numbering Authority (CNA)

Avira antivirus engine null pointer dereference when scanning a malformed PE file

Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.64.

Affected Products

Vendor

Gen Digital

Product

Avira Antivirus

Platforms

Windows
macOS
Linux

Default Status

affected

Versions

Affected

From 0 before 8.3.70.64 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-476	CWE-476 NULL Pointer Dereference

Type: CWE

CWE ID: CWE-476

Description: CWE-476 NULL Pointer Dereference

Metrics

Version	Base score	Base severity	Vector
3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Impacts

CAPEC ID	Description
CAPEC-125	CAPEC-125 Denial of Service

CAPEC ID: CAPEC-125

Description: CAPEC-125 Denial of Service

Solutions

Upgrade to Avira scan engine build 8.3.70.64 or any later engine release. Builds at or above 8.3.70.64 include the fix.

Credits

reporter

Mike Zhang, an independent security researcher

References

Hyperlink	Resource
https://www.gendigital.com/us/en/contact-us/security-advisories/	N/A

Hyperlink: https://www.gendigital.com/us/en/contact-us/security-advisories/

Resource: N/A

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References