CVE-2025-7017

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-7017", "assignerOrgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "state": "PUBLISHED", "assignerShortName": "GEN", "dateReserved": "2025-07-02T11:59:07.847Z", "datePublished": "2026-06-12T22:13:13.533Z", "dateUpdated": "2026-06-15T16:02:13.703Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "shortName": "GEN", "dateUpdated": "2026-06-12T22:13:13.533Z"}, "title": "Avira antivirus engine heap buffer OOB read when scanning a malformed Windows MSI file", "datePublic": "2025-01-17T15:40:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-549", "descriptions": [{"lang": "en", "value": "CAPEC-549 Local Execution of Code"}]}], "affected": [{"vendor": "Gen Digital", "product": "Avira Antivirus", "platforms": ["Windows", "macOS", "Linux"], "versions": [{"status": "affected", "version": "0", "lessThan": "8.3.70.56", "versionType": "custom"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.\n\nThis issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.56.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.<p>This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.56.</p>"}]}], "references": [{"url": "https://www.gendigital.com/us/en/contact-us/security-advisories/"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.8, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "Upgrade to Avira scan engine build 8.3.70.56 or any later engine release. Builds at or above 8.3.70.56 include the fix.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Upgrade to Avira scan engine build <strong>8.3.70.56</strong> or <strong>any later</strong> engine release. Builds at or above 8.3.70.56 include the fix."}]}], "credits": [{"lang": "en", "value": "Mike Zhang, an independent security researcher", "type": "reporter"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-15T16:02:02.586536Z", "id": "CVE-2025-7017", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-15T16:02:13.703Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-7017", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-06-15T16:02:02.586536Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-15T16:02:09.101Z"}}], "cna": {"title": "Avira antivirus engine heap buffer OOB read when scanning a malformed Windows MSI file", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "reporter", "value": "Mike Zhang, an independent security researcher"}], "impacts": [{"capecId": "CAPEC-549", "descriptions": [{"lang": "en", "value": "CAPEC-549 Local Execution of Code"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Gen Digital", "product": "Avira Antivirus", "versions": [{"status": "affected", "version": "0", "lessThan": "8.3.70.56", "versionType": "custom"}], "platforms": ["Windows", "macOS", "Linux"], "defaultStatus": "affected"}], "solutions": [{"lang": "en", "value": "Upgrade to Avira scan engine build 8.3.70.56 or any later engine release. Builds at or above 8.3.70.56 include the fix.", "supportingMedia": [{"type": "text/html", "value": "Upgrade to Avira scan engine build <strong>8.3.70.56</strong> or <strong>any later</strong> engine release. Builds at or above 8.3.70.56 include the fix.", "base64": false}]}], "datePublic": "2025-01-17T15:40:00.000Z", "references": [{"url": "https://www.gendigital.com/us/en/contact-us/security-advisories/"}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.\n\nThis issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.56.", "supportingMedia": [{"type": "text/html", "value": "Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.<p>This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.56.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read"}]}], "providerMetadata": {"orgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "shortName": "GEN", "dateUpdated": "2026-06-12T22:13:13.533Z"}}}, "cveMetadata": {"cveId": "CVE-2025-7017", "state": "PUBLISHED", "dateUpdated": "2026-06-15T16:02:13.703Z", "dateReserved": "2025-07-02T11:59:07.847Z", "assignerOrgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "datePublished": "2026-06-12T22:13:13.533Z", "assignerShortName": "GEN"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "platforms": ["Windows", "macOS", "Linux"], "product": "Avira Antivirus", "vendor": "Gen Digital", "versions": [{"lessThan": "8.3.70.56", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "security@nortonlifelock.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.\n\nThis issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.56."}, {"lang": "es", "value": "Vulnerabilidad de lectura fuera de l\u00edmites del b\u00fafer de pila en el motor de Avira Antivirus al escanear un archivo MSI de Windows malformado puede permitir la Ejecuci\u00f3n Local de C\u00f3digo o la Denegaci\u00f3n de Servicio del proceso del motor del antivirus.\n\nEste problema afecta a Avira Antivirus en Windows, macOS y Linux para compilaciones del motor anteriores a la 8.3.70.56."}], "id": "CVE-2025-7017", "lastModified": "2026-10-07T08:10:00.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "security@nortonlifelock.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-7017", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-06-15T16:02:02.586536Z", "version": "2.0.3"}}]}, "published": "2026-06-12T22:16:49.343", "references": [{"source": "security@nortonlifelock.com", "url": "https://www.gendigital.com/us/en/contact-us/security-advisories/"}], "sourceIdentifier": "security@nortonlifelock.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "security@nortonlifelock.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["windows", "macos", "linux"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,8.3.70.56)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Avira Antivirus", "source": "cna", "vendor": "Gen Digital"}, "product": "avira_antivirus", "vendor": "gen_digital"}], "created": "2026-06-13T00:15:20.315409+00:00", "updated": "2026-06-13T12:29:27.398143+00:00", "vendors": ["gen_digital", "gen_digital$PRODUCT$avira_antivirus"]}