CVE-2025-7017 - Avira antivirus engine heap buffer OOB read when scanning a malformed Windows MSI file

Back Back to CVE browser

HIGH

Avira antivirus engine heap buffer OOB read when scanning a malformed Windows MSI file

Published Jun 12, 2026

7.8

HIGH

CVSS 3.1

EPSS 0.13%

Description

Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.

This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.56.

Affected products

Vendor Gen Digital Product Avira Antivirus Default
affected
Affected
- ≥ 0, < 8.3.70.56

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Gen Digital	Avira Antivirus	affected	Affected ≥ 0, < 8.3.70.56

Remediation

Vendor solution

Upgrade to Avira scan engine build 8.3.70.56 or any later engine release. Builds at or above 8.3.70.56 include the fix.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210131		Advisory
https://www.gendigital.com/us/en/contact-us/security-advisories/

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner GEN

Published Jun 12, 2026

Updated Jun 15, 2026

Reserved Jul 2, 2025

Link CVE-2025-7017

CISA Vulnrichment

Updated Jun 15, 2026

NVD

Status Deferred

Modified Oct 7, 2026

Link CVE-2025-7017

Red Hat

No data

ENISA EUVD

Assigner GEN

Published Jun 12, 2026

Updated Jun 15, 2026

Link EUVD-2025-210131

GitHub

No data