CVE-2025-7010 Details

A stack overflow vulnerability has been identified in multiple antivirus products by Gen Digital, including Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus. This vulnerability arises from uncontrolled recursion in the antivirus scanning logic when processing a malformed PDF file, potentially leading to a denial-of-service condition where the antivirus process becomes unresponsive. The issue affects installations on Windows, macOS, and Linux that are using virus definition builds prior to VPS 25021208. The vulnerable scanning logic is distributed through a shared virus definition update stream that also impacts other Gen Digital products embedding the same engine. However, installations at or above the listed build are not vulnerable, regardless of the product.

Users can update their antivirus products to version VPS 25021208 or later to mitigate this vulnerability. Instructions for updating can be found on the official websites or through the respective update channels of the antivirus products.