CVE-2025-3500CWE-190

CVE-2025-3500

Critical · published December 1, 2025

CVSS v3.1
9.0
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

🚨 An integer overflow in Avast Antivirus can turn your security software into a door wide open for privilege escalation! 🔥 Think of this flaw like a bouncer at a club who forgets to check the IDs of guests on the guest list — it lets unauthorized individuals waltz right in when they shouldn't belong. Just like a party that could get out of hand, this vulnerability could give attackers access they shouldn't have. An attacker could exploit this vulnerability to escalate their privileges, potentially gaining complete control over the system. This could lead to unauthorized access to sensitive files, installation of malicious software, and a compromised system that may be difficult to recover. It's an absolute nightmare for any security-conscious user!

Put simply

Think of this flaw like a bouncer at a club who forgets to check the IDs of guests on the guest list — it lets unauthorized individuals waltz right in when they shouldn't belong. Just like a party that could get out of hand, this vulnerability could give attackers access they shouldn't have. This integer overflow vulnerability allows for privilege escalation in Avast Antivirus versions 25.1.981.6 prior to 25.3, leading to the possibility of unauthorized access and manipulation of system resources.

What to do

An attacker could exploit this vulnerability to escalate their privileges, potentially gaining complete control over the system. This could lead to unauthorized access to sensitive files, installation of malicious software, and a compromised system that may be difficult to recover. It's an absolute nightmare for any security-conscious user! Immediate action is crucial! Update your Avast Antivirus to version 25.3 or later to close this security loophole. Additionally, consider regularly reviewing and updating your security protocols to stay ahead of potential threats. You've got this! Follow these steps to secure your system and keep those pesky intruders at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00459 · 38.8th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2025-12-01T21:15Z
Affected products (1)
ProductVersionsFixed in
avast/antivirus≥ 25.1.981.6, < 25.325.3
References (1)
EPSS history
Timeline
  • 01 DEC 16:09Z
    Integer Overflow in Avast Antiviurs 25.1.981.6 on Windows may result in privilege escalation
    cvelistv5