CVE-2025-7018

Deferred Deferred - Pending Action

Null Pointer Dereference in Avira Antivirus Engine

Publication date: 2026-06-12

Last updated on: 2026-06-15

Assigner: NortonLifeLock Inc.

Description

Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.64.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-12

Last Modified

2026-06-15

Generated

2026-07-03

AI Q&A

2026-06-13

EPSS Evaluated

2026-07-02

NVD

CVE-2025-7018

EUVD

EUVD-2025-210132

Affected Vendors & Products

Vendor	Product	Version / Range
avira	antivirus	to 8.3.70.64 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability is a null pointer dereference issue in the Avira Antivirus engine that occurs when scanning a malformed Windows PE (Portable Executable) file.

When triggered, it may cause the antivirus engine process to crash, resulting in a Denial-of-Service (DoS) condition.

Mitigation Strategies

To mitigate this vulnerability, update the Avira Antivirus engine to version 8.3.70.64 or later on all affected platforms including Windows, macOS, and Linux.

Impact Analysis

The vulnerability can cause the Avira Antivirus engine process to crash when it encounters a specially crafted malformed Windows PE file.

This leads to a Denial-of-Service condition, potentially leaving your system unprotected while the antivirus engine is not running.

Hi! I’m here to help you understand CVE-2025-7018. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70