CVE-2025-7018

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-7018", "assignerOrgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "state": "PUBLISHED", "assignerShortName": "GEN", "dateReserved": "2025-07-02T12:01:13.717Z", "datePublished": "2026-06-12T22:13:49.820Z", "dateUpdated": "2026-06-15T16:01:44.198Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "shortName": "GEN", "dateUpdated": "2026-06-12T22:13:49.820Z"}, "title": "Avira antivirus engine null pointer dereference when scanning a malformed PE file", "datePublic": "2025-01-31T11:34:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-476", "description": "CWE-476 NULL Pointer Dereference", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-125", "descriptions": [{"lang": "en", "value": "CAPEC-125 Denial of Service"}]}], "affected": [{"vendor": "Gen Digital", "product": "Avira Antivirus", "platforms": ["Windows", "macOS", "Linux"], "versions": [{"status": "affected", "version": "0", "lessThan": "8.3.70.64", "versionType": "custom"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus engine process.\n\nThis issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.64.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus engine process.<p>This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.64.</p>"}]}], "references": [{"url": "https://www.gendigital.com/us/en/contact-us/security-advisories/"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 5.5, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}}], "solutions": [{"lang": "en", "value": "Upgrade to Avira scan engine build 8.3.70.64 or any later engine release. Builds at or above 8.3.70.64 include the fix.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Upgrade to Avira scan engine build <strong>8.3.70.64</strong> or <strong>any later</strong> engine release. Builds at or above 8.3.70.64 include the fix."}]}], "credits": [{"lang": "en", "value": "Mike Zhang, an independent security researcher", "type": "reporter"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-15T16:01:30.901318Z", "id": "CVE-2025-7018", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-15T16:01:44.198Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-7018", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-15T16:01:30.901318Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-15T16:01:37.583Z"}}], "cna": {"title": "Avira antivirus engine null pointer dereference when scanning a malformed PE file", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "reporter", "value": "Mike Zhang, an independent security researcher"}], "impacts": [{"capecId": "CAPEC-125", "descriptions": [{"lang": "en", "value": "CAPEC-125 Denial of Service"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Gen Digital", "product": "Avira Antivirus", "versions": [{"status": "affected", "version": "0", "lessThan": "8.3.70.64", "versionType": "custom"}], "platforms": ["Windows", "macOS", "Linux"], "defaultStatus": "affected"}], "solutions": [{"lang": "en", "value": "Upgrade to Avira scan engine build 8.3.70.64 or any later engine release. Builds at or above 8.3.70.64 include the fix.", "supportingMedia": [{"type": "text/html", "value": "Upgrade to Avira scan engine build <strong>8.3.70.64</strong> or <strong>any later</strong> engine release. Builds at or above 8.3.70.64 include the fix.", "base64": false}]}], "datePublic": "2025-01-31T11:34:00.000Z", "references": [{"url": "https://www.gendigital.com/us/en/contact-us/security-advisories/"}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus engine process.\n\nThis issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.64.", "supportingMedia": [{"type": "text/html", "value": "Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus engine process.<p>This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.64.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-476", "description": "CWE-476 NULL Pointer Dereference"}]}], "providerMetadata": {"orgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "shortName": "GEN", "dateUpdated": "2026-06-12T22:13:49.820Z"}}}, "cveMetadata": {"cveId": "CVE-2025-7018", "state": "PUBLISHED", "dateUpdated": "2026-06-15T16:01:44.198Z", "dateReserved": "2025-07-02T12:01:13.717Z", "assignerOrgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "datePublished": "2026-06-12T22:13:49.820Z", "assignerShortName": "GEN"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "platforms": ["Windows", "macOS", "Linux"], "product": "Avira Antivirus", "vendor": "Gen Digital", "versions": [{"lessThan": "8.3.70.64", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "security@nortonlifelock.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus engine process.\n\nThis issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.64."}, {"lang": "es", "value": "Vulnerabilidad de desreferenciaci\u00f3n de puntero nulo en el motor de Avira Antivirus al escanear un archivo PE de Windows malformado puede permitir la Denegaci\u00f3n de Servicio del proceso del motor del antivirus.\n\nEste problema afecta a Avira Antivirus en Windows, macOS y Linux para versiones del motor anteriores a la 8.3.70.64."}], "id": "CVE-2025-7018", "lastModified": "2026-10-07T08:10:00.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "security@nortonlifelock.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-7018", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-15T16:01:30.901318Z", "version": "2.0.3"}}]}, "published": "2026-06-12T22:16:49.467", "references": [{"source": "security@nortonlifelock.com", "url": "https://www.gendigital.com/us/en/contact-us/security-advisories/"}], "sourceIdentifier": "security@nortonlifelock.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-476"}], "source": "security@nortonlifelock.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["windows", "macos", "linux"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,8.3.70.64)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Avira Antivirus", "source": "cna", "vendor": "Gen Digital"}, "product": "avira_antivirus", "vendor": "gen_digital"}], "created": "2026-06-12T23:30:08.540073+00:00", "updated": "2026-06-13T12:29:25.686562+00:00", "vendors": ["gen_digital", "gen_digital$PRODUCT$avira_antivirus"]}