PT-2025-48473 · Avast · Avast Antivirus

Mike Zhang · Published 2025-12-01 · Updated 2025-12-03 · CVE-2025-10101

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions 15.7 through 3.9.2025

Description A flaw exists in Avast Antivirus on MacOS that involves a heap-based buffer overflow and out-of-bounds write condition. Processing a specially crafted Mach-O file could lead to local code execution or a denial of service, impacting the antivirus protection.

Recommendations Update Avast Antivirus to a version later than 3.9.2025.

Fix

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

CVE-2025-10101

Affected Products

Avast Antivirus

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-10101 · Security Note
• https://twitter.com/CVEnew/status/1995519567087477224 · Twitter Post
• https://gendigital.com/us/en/contact-us/security-advisories · Note
• https://t.me/true_secator/7687 · Telegram Post