CVE-2025-8351 — Heap-based Buffer Overflow in Antivirus

CWE-122 — Heap-based Buffer OverflowCWE-125 — Out-of-bounds Read3 documents3 sources
Severity
9.0CRITICALNVD
EPSS
0.1%
top 69.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Avast Antivirus
Timeline
PublishedDec 1

Description

Heap-based Buffer Overflow, Out-of-bounds Read vulnerability in Avast Antivirus on MacOS when scanning a malformed file may allow Local Execution of Code or Denial-of-Service of the anitvirus engine process.This issue affects Antivirus: from 8.3.70.94 before 8.3.70.98.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:HExploitability: 2.2 | Impact: 6.0

Affected Packages1 packages

▶CVEListV5avast/antivirus8.3.70.94 — 8.3.70.98

🔴Vulnerability Details

2
GHSA
GHSA-mgc9-26px-4hjp: Heap-based Buffer Overflow, Out-of-bounds Read vulnerability in Avast Antivirus on MacOS when scanning a malformed file may allow Local Execution of C↗2025-12-01
▶
CVEList
Scanning a malformed file in Avast Antivirus 8.3.70.94 on MacOS may result in remote code execution↗2025-12-01
▶
CVE-2025-8351 — Heap-based Buffer Overflow in Avast | cvebase