CVE-2025-10101 — Heap-based Buffer Overflow in Antivirus

CWE-122 — Heap-based Buffer OverflowCWE-787 — Out-of-bounds Write3 documents3 sources
Severity
8.1HIGHNVD
EPSS
0.0%
top 92.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Avast Antivirus
Timeline
PublishedDec 1

Description

Heap-based Buffer Overflow, Out-of-bounds Write vulnerability in Avast Antivirus on MacOS of a crafted Mach-O file may allow Local Execution of Code or Denial of Service of antivirus protection. This issue affects Antivirus: from 15.7 before 3.9.2025.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:HExploitability: 1.4 | Impact: 6.0

Affected Packages1 packages

▶CVEListV5avast/antivirus15.7 — 3.9.2025

🔴Vulnerability Details

2
GHSA
GHSA-5wgw-665q-2r54: Heap-based Buffer Overflow, Out-of-bounds Write vulnerability in Avast Antivirus on MacOS of a crafted Mach-O file may allow Local Execution of Code o↗2025-12-01
▶
CVEList
Crafted Mach-O file may allow Remote Code Execution in Avast Antivirus 15.7 on MacOS↗2025-12-01
▶
CVE-2025-10101 — Heap-based Buffer Overflow in Avast | cvebase