CVE-2025-10101CWE-125

CVE-2025-10101

High · published December 1, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
7.1
In the wild
Unconfirmed
What it is

⚡ A heap buffer out-of-bounds read in Avast Antivirus could allow attackers to crash your antivirus process or even execute their own code — yikes! 🔥 Think of it like a chef misreading a recipe and accidentally adding too much salt; the dish doesn’t just taste bad — it can ruin the entire meal. Here, the malformed Mach-O file is that extra salt, causing your antivirus to malfunction when it scans. If exploited, this vulnerability could let an attacker crash your antivirus, leaving your system unprotected against real threats. In the worst-case scenario, they could even execute malicious code on your machine, making this a pretty serious concern for your digital safety!

Put simply

Think of it like a chef misreading a recipe and accidentally adding too much salt; the dish doesn’t just taste bad — it can ruin the entire meal. Here, the malformed Mach-O file is that extra salt, causing your antivirus to malfunction when it scans. This vulnerability arises from a flaw in the scanning logic of Avast Antivirus, AVG Antivirus, Norton Antivirus, and others, which does not properly handle malformed Mach-O files, leading to potential local code execution or denial-of-service scenarios.

What to do

If exploited, this vulnerability could let an attacker crash your antivirus, leaving your system unprotected against real threats. In the worst-case scenario, they could even execute malicious code on your machine, making this a pretty serious concern for your digital safety! To protect yourself, make sure your antivirus is updated to virus definition build VPS 25090300 or higher. Check for updates across all affected products and ensure your installations are secure! You've got this! By keeping your antivirus up to date, you're on the front lines of digital defense. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00179 · 7.1th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-12-01T21:15Z
References (1)
EPSS history
Timeline
  • 01 DEC 15:32Z
    Avast antivirus heap buffer OOB read when scanning a malformed Mach-O file
    cvelistv5