CVE-2025-8351— Avira antivirus engine heap buffer OOB read when scanning a malformed file
Possible ATT&CK Techniques 3AI
T1055 · Process Injection T1499 · Endpoint Denial of Service T1203 · Exploitation for Client ExecutionAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Gen Digital | Avira Antivirus | < 8.3.70.98 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-8351
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Avira antivirus engine heap buffer OOB read when scanning a malformed file
Source: CVE Program / CVE List V5
Vulnerability Description
Heap-based Buffer Overflow, Out-of-bounds Read vulnerability in Avira Antivirus engine when scanning a malformed file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.98.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
堆缓冲区溢出
Source: CVE Program / CVE List V5
Vulnerability Title
Avast Antivirus 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Avast Antivirus是捷克Avast公司的一套杀毒软件。 Avast Antivirus 8.3.70.94版本至8.3.70.98之前版本存在安全漏洞，该漏洞源于堆缓冲区溢出和越界读取，可能导致本地代码执行或拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Gen Digital | Avira Antivirus | 0 ~ 8.3.70.98 | - |
II. Public POCs for CVE-2025-8351
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-8351
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: Avira Antivirus
- CVE-2026-6676
Avira antivirus engine heap buffer OOB write when scanning a - CVE-2025-14098
Avira antivirus engine heap buffer OOB write when scanning a - CVE-2025-9033
Avira antivirus engine heap buffer OOB read when scanning a - CVE-2025-9032
Avira antivirus engine heap buffer OOB read when scanning a - CVE-2025-7018
Avira antivirus engine null pointer dereference when scannin
Same vendor: Gen Digital
- CVE-2026-12410
CCleaner local privilege escalation via link following on un - CVE-2026-12068
Avira Password Manager credential disclosure via cross-origi - CVE-2026-6676
Avira antivirus engine heap buffer OOB write when scanning a - CVE-2025-14098
Avira antivirus engine heap buffer OOB write when scanning a - CVE-2025-9033
Avira antivirus engine heap buffer OOB read when scanning a
Same weakness: CWE-122
- CVE-2026-19970
Open Asset Import Library Assimp Node MDLLoader.cpp AddBones - CVE-2026-19968
Open Asset Import Library Assimp 3DGS MDL7 Model LWOLoader.h - CVE-2026-19967
Open Asset Import Library Assimp File Compression.cpp decomp - CVE-2026-72970
Microsoft Edge (Chromium-based) Remote Code Execution Vulner - CVE-2026-19385
PostgreSQL pg_dump heap buffer overflow executes arbitrary c
V. Comments for CVE-2025-8351
No comments yet