CVE-2025-7003 - Avira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 1)

Back Back to CVE browser

HIGH

Avira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 1)

Published Jun 12, 2026

7.8

HIGH

CVSS 3.1

EPSS 0.13%

Description

Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.

This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.56.

Affected products

Vendor Gen Digital Product Avira Antivirus Default
affected
- Version
  0
  Status
  affected
  Constraints
  <8.3.70.56

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Gen Digital

Avira Antivirus

affected

Version	Status	Constraints
0	affected	<8.3.70.56

Remediation

Vendor solution

Upgrade to Avira scan engine build 8.3.70.56 or any later engine release. Builds at or above 8.3.70.56 include the fix.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210123		Advisory
https://www.gendigital.com/us/en/contact-us/security-advisories/

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner GEN

Published Jun 12, 2026

Updated Jun 15, 2026

Reserved Jul 2, 2025

Link CVE-2025-7003

CISA Vulnrichment

Updated Jun 15, 2026

NVD

Status Deferred

Modified Oct 7, 2026

Link CVE-2025-7003

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-7003

ENISA EUVD

Assigner GEN

Published Jun 12, 2026

Updated Jun 15, 2026

Exploited since n/a

Link EUVD-2025-210123

EUVD-2025-210123