CVE-2025-7003— Avira反病毒引擎PDF扫描越界读取漏洞
Possible ATT&CK Techniques 2AI
T1203 · Exploitation for Client Execution T1190 · Exploit Public-Facing Application新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2025-7003の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Avira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 1)
ソース: NVD (National Vulnerability Database)
脆弱性説明
Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.56.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
跨界内存读
ソース: NVD (National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Gen Digital | Avira Antivirus | 0 ~ 8.3.70.56 | - |
II. CVE-2025-7003の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2025-7003のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · Gen Digital · 2026-06-12 · 17 CVEs total
| CVE-2026-6676 | 7.8 HIGH | Avira antivirus engine heap buffer OOB write when scanning a malformed POSIX tar archive |
| CVE-2025-7002 | 7.8 HIGH | Avira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 2) |
| CVE-2025-7008 | 7.8 HIGH | Avast antivirus heap buffer OOB read when scanning a malformed PE file |
| CVE-2025-7009 | 7.8 HIGH | Avast antivirus heap buffer OOB read when scanning a malformed PE file |
| CVE-2025-7017 | 7.8 HIGH | Avira antivirus engine heap buffer OOB read when scanning a malformed Windows MSI file |
| CVE-2025-7004 | 7.8 HIGH | Avast antivirus heap buffer OOB write when scanning a malformed PE file |
| CVE-2025-7011 | 7.8 HIGH | Avast antivirus heap OOB when scanning a malformed zip file |
| CVE-2025-9032 | 7.8 HIGH | Avira antivirus engine heap buffer OOB read when scanning a malformed PE file |
| CVE-2025-9033 | 7.8 HIGH | Avira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 3) |
| CVE-2025-14098 | 7.8 HIGH | Avira antivirus engine heap buffer OOB write when scanning a malformed MS-DOS executable f |
| CVE-2026-12068 | 7.4 HIGH | Avira Password Manager credential disclosure via cross-origin autofill in Firefox |
| CVE-2025-7006 | 5.5 MEDIUM | Avast antivirus use of stack memory after free when scanning a malformed PE file |
| CVE-2025-7010 | 5.5 MEDIUM | Avast antivirus stack overflow when scanning a malformed PDF file |
| CVE-2025-7005 | 5.5 MEDIUM | Avast antivirus infinite recursion when scanning a malformed PE file |
| CVE-2025-7018 | 5.5 MEDIUM | Avira antivirus engine null pointer dereference when scanning a malformed PE file |
| CVE-2025-7019 | 5.5 MEDIUM | Avast antivirus stack overflow when scanning a malformed Office Open XML file |
IV. 関連脆弱性
同じ製品: Avira Antivirus
- CVE-2026-6676
Avira antivirus engine heap buffer OOB write when scanning a - CVE-2025-14098
Avira antivirus engine heap buffer OOB write when scanning a - CVE-2025-9033
Avira antivirus engine heap buffer OOB read when scanning a - CVE-2025-9032
Avira antivirus engine heap buffer OOB read when scanning a - CVE-2025-7018
Avira antivirus engine null pointer dereference when scannin
同じベンダー: Gen Digital
- CVE-2026-12068
Avira Password Manager credential disclosure via cross-origi - CVE-2026-6676
Avira antivirus engine heap buffer OOB write when scanning a - CVE-2025-14098
Avira antivirus engine heap buffer OOB write when scanning a - CVE-2025-9033
Avira antivirus engine heap buffer OOB read when scanning a - CVE-2025-9032
Avira antivirus engine heap buffer OOB read when scanning a
同じ弱点: CWE-125
- CVE-2025-9033
Avira antivirus engine heap buffer OOB read when scanning a - CVE-2025-9032
Avira antivirus engine heap buffer OOB read when scanning a - CVE-2025-7017
Avira antivirus engine heap buffer OOB read when scanning a - CVE-2025-7011
Avast antivirus heap OOB when scanning a malformed zip file - CVE-2025-7009
Avast antivirus heap buffer OOB read when scanning a malform
V. CVE-2025-7003へのコメント
まだコメントはありません