CVE-2025-7007

Published: Dec 1, 2025Modified: Jun 17, 2026Deferred

7.5

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 6.0

Source: security@nortonlifelock.com (Secondary)

Description

NULL Pointer Dereference vulnerability in Avast Antivirus on MacOS, Avast Anitvirus on Linux when scanning a malformed Windows PE file causes the antivirus process to crash.This issue affects Antivirus: 16.0.0; Anitvirus: 3.0.3.

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (1)

https://www.gendigital.com/us/en/contact-us/security-advisories/

Source: security@nortonlifelock.com

Timeline

No history available yet.