CVE-2025-9032
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A heap buffer out-of-bounds read vulnerability exists in the Avira Antivirus engine when scanning a malformed Windows PE file. This may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.
Risk Assessment
This vulnerability could allow attackers to execute malicious code on the victim's system or cause the antivirus engine to crash, potentially leading to a lack of protection against threats.
Recommendation
It is recommended to update the Avira Antivirus engine to version 8.3.70.98 or later to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.98.