{"id":"CVE-2025-8351","aliases":["EUVD-2025-200023","GHSA-mgc9-26px-4hjp"],"status":"published","title":"Avira antivirus engine heap buffer OOB read when scanning a malformed file","description":"Heap-based Buffer Overflow, Out-of-bounds Read vulnerability in Avira Antivirus engine when scanning a malformed file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.\n\nThis issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.98.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00174,"percentile":0.06893,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-122","CWE-125"],"published":"2025-12-01T15:51:42Z","modified":"2026-06-17T10:06:48Z","products":[{"vendor":"avira","product":"avira antivirus"},{"vendor":"gen digital","product":"avira antivirus"}],"references":[{"url":"https://www.gendigital.com/us/en/contact-us/security-advisories/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8351"},{"url":"https://www.gendigital.com/us/en/contact-us/security-advisories"},{"url":"https://github.com/advisories/GHSA-mgc9-26px-4hjp"}],"sources":{"cve":[{"id":"CVE-2025-8351","title":"Avira antivirus engine heap buffer OOB read when scanning a malformed file","description":"Heap-based Buffer Overflow, Out-of-bounds Read vulnerability in Avira Antivirus engine when scanning a malformed file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.\n\nThis issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.98.","status":"published","published":"2025-12-01T15:51:42.044Z","modified":"2026-06-12T22:32:51.689Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-122","CWE-125"],"updated_at":"2026-11-02T14:32:38.351095Z"}],"euvd":[{"id":"EUVD-2025-200023","description":"Heap-based Buffer Overflow, Out-of-bounds Read vulnerability in Avira Antivirus engine when scanning a malformed file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.\n\nThis issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.98.","status":"published","published":"2025-12-01T15:51:42Z","modified":"2026-06-12T22:32:51Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:20:43.222Z"}],"ghsa":[{"id":"GHSA-mgc9-26px-4hjp","title":"Heap-based Buffer Overflow, Out-of-bounds Read vulnerability in Avast Antivirus on MacOS when...","description":"Heap-based Buffer Overflow, Out-of-bounds Read vulnerability in Avast Antivirus on MacOS when scanning a malformed file may allow Local Execution of Code or Denial-of-Service of the anitvirus engine process.This issue affects Antivirus: from 8.3.70.94 before 8.3.70.98.","status":"published","published":"2025-12-01T18:30:38Z","modified":"2025-12-01T18:30:45Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:04:59.670278Z"}],"nvd":[{"id":"CVE-2025-8351","description":"Heap-based Buffer Overflow, Out-of-bounds Read vulnerability in Avira Antivirus engine when scanning a malformed file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.\n\nThis issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.98.","status":"published","published":"2025-12-01T16:15:57.857Z","modified":"2026-06-17T10:06:48.5Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122","CWE-125"],"updated_at":"2026-11-02T14:11:46.94029Z"}]}}