CVE-2025-8351 — AI Deep Analysis Summary

🚨 **Essence**: A critical flaw in Avast Antivirus involving **Heap Buffer Overflow** and **Out-of-Bounds Read**. 💥 **Consequences**: Attackers can achieve **Local Code Execution** or cause a **Denial of Service (DoS)**.…

🛡️ **Root Cause**: **CWE-122** (Heap-based Buffer Overflow). The software fails to properly validate memory boundaries, allowing data to overwrite adjacent memory or read outside allocated limits.…

📦 **Affected Versions**: Avast Antivirus versions **8.3.70.94** up to (but not including) **8.3.70.98**. 🇨🇿 **Vendor**: Avast (Czech Republic). If you are running these specific builds, you are in the danger zone.

💀 **Attacker Capabilities**: With **Local Code Execution**, an attacker can run arbitrary code on the victim's machine. This leads to full **Confidentiality**, **Integrity**, and **Availability** loss (C:H, I:H, A:H).…

🔓 **Exploitation Threshold**: **Low**. The CVSS vector shows **AV:N** (Network), **AC:H** (High Complexity), **PR:N** (No Privileges Required), and **UI:N** (No User Interaction).…

🕵️ **Public Exploit Status**: **None Detected**. The `pocs` field is empty. Currently, there are no known public Proof-of-Concepts or wild exploits.…

🔍 **Self-Check Method**: Check your installed Avast version number. If it falls within the range **[8.3.70.94, 8.3.70.97]**, you are vulnerable.…

🩹 **Official Fix**: Yes. The vulnerability is fixed in version **8.3.70.98** and later. The vendor (Avast/Gen Digital) has acknowledged the issue.…

🚧 **No Patch Workaround**: Since this is a client-side antivirus software, network isolation is difficult. The best mitigation is to **immediately update** to the latest version.…

⚡ **Urgency**: **HIGH**. CVSS Score indicates High Impact (C:H, I:H, A:H). Even with High Attack Complexity, the lack of required privileges and user interaction makes it dangerous.…