CVE-2025-8351CWE-122CWE-125

Avira antivirus engine heap buffer OOB read when scanning a malformed file

High · published December 1, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
5.3
In the wild
Unconfirmed
What it is

⚡ A malformed file can turn Avira Antivirus into a virtual paperweight! 😱 This heap-based buffer overflow could lead to local code execution or crash the antivirus engine entirely. Think of it like a fire drill gone wrong; when the alarm goes off incorrectly, the firefighters scramble, but if it happens too many times, the entire fire station might just shut down for good! If exploited, this vulnerability could allow malicious code to run on your system, giving attackers control or potentially resulting in a denial-of-service that leaves your antivirus ineffective during crucial moments. Imagine your protective shield crumbling just when you need it most!

Put simply

Think of it like a fire drill gone wrong; when the alarm goes off incorrectly, the firefighters scramble, but if it happens too many times, the entire fire station might just shut down for good! This heap-based buffer overflow vulnerability in the Avira Antivirus engine allows an attacker to manipulate memory handling when scanning malformed files, which can lead to local execution of arbitrary code or crash the antivirus process.

What to do

If exploited, this vulnerability could allow malicious code to run on your system, giving attackers control or potentially resulting in a denial-of-service that leaves your antivirus ineffective during crucial moments. Imagine your protective shield crumbling just when you need it most! Update your Avira Antivirus to version 8.3.70.98 or higher immediately to close this vulnerability. Review any recent scans to ensure no malicious files could have exploited this flaw during the window of exposure. Don't forget to monitor for any unusual activity post-update! You've got this! With a quick update, you'll have your defenses back up and running in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00163 · 5.3th percentile
Weaknesses
CWE-122 · Heap-based Buffer Overflow; CWE-125 · Out-of-bounds Read
Published
2025-12-01T15:51Z
EPSS history
Timeline
  • 01 DEC 15:51Z
    Avira antivirus engine heap buffer OOB read when scanning a malformed file
    cvelistv5