7.8
CVE-2025-9032
- EPSS 0.12%
- Veröffentlicht 12.06.2026 22:14:51
- Zuletzt bearbeitet 15.06.2026 20:49:19
- Quelle security@nortonlifelock.com
- CVE-Watchlists
- Unerledigt
Avira antivirus engine heap buffer OOB read when scanning a malformed PE file
Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.98.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerGen Digital
≫
Produkt
Avira Antivirus
Default Statusaffected
Version
0
Version <
8.3.70.98
Status
affected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.12% | 0.023 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| security@nortonlifelock.com | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://www.gendigital.com/us/en/contact-us/security-advisories/