Approved changes feed: RSS · Atom

cpe:2.3:a:gen_digital:avg_antivirus:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGen Digital (99281401-5284-550a-89e3-b841eaca51f8)
ProductAvg Antivirus (b661fd40-3730-54a6-889b-8e063d37d881)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7019 vulnerable 2026-07-29 00:18:08.449878 Avast antivirus stack overflow when scanning a malformed Office Open XML file
MEDIUM (5.5)
Stack overflow vulnerability in Avast Antivirus when scanning a malformed Office Open XML file may allow Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds before VPS 25020100. The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.
Published: 2026-06-12T22:14:19.144Z
Updated: 2026-06-15T18:11:31.712Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7011 vulnerable 2026-07-29 00:18:08.430637 Avast antivirus heap OOB when scanning a malformed zip file
HIGH (7.8)
Heap out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed zip file containing XML may allow Local Execution of Code or Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds from 25020100 before 25021208. The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.
Published: 2026-06-12T22:12:37.444Z
Updated: 2026-06-15T16:02:44.849Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7010 vulnerable 2026-07-29 00:18:08.430146 Avast antivirus stack overflow when scanning a malformed PDF file
MEDIUM (5.5)
Stack overflow vulnerability due to uncontrolled recursion in Avast Antivirus when scanning a malformed PDF file may allow Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds before VPS 25021208. The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.
Published: 2026-06-12T22:11:22.855Z
Updated: 2026-06-15T17:11:01.415Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7009 vulnerable 2026-07-29 00:18:08.429397 Avast antivirus heap buffer OOB read when scanning a malformed PE file
HIGH (7.8)
Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds before VPS 25021310. The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.
Published: 2026-06-12T22:10:26.925Z
Updated: 2026-06-15T17:11:31.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7008 vulnerable 2026-07-29 00:18:08.428416 Avast antivirus heap buffer OOB read when scanning a malformed PE file
HIGH (7.8)
Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file with .NET metadata may allow Local Execution of Code or Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds before VPS 25021310. The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.
Published: 2026-06-12T22:09:49.037Z
Updated: 2026-06-15T17:11:56.726Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7006 vulnerable 2026-07-29 00:18:08.422236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7005 vulnerable 2026-07-29 00:18:08.421302 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7004 vulnerable 2026-07-29 00:18:08.406263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.