PT-2025-48473 · Avast · Avast Antivirus

Mike Zhang · CVE-2025-10101 · Published 2025-12-01 · Updated 2026-06-13

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions 15.7 through 3.9.2025

Description A flaw exists in Avast Antivirus on MacOS that involves a heap-based buffer overflow and out-of-bounds write condition. Processing a specially crafted Mach-O file could lead to local code execution or a denial of service, impacting the antivirus protection.

Recommendations Update Avast Antivirus to a version later than 3.9.2025.

Fix

DoS

Out of bounds Read

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-125

CWE-787

CWE-122

Related Identifiers

CVE-2025-10101

Affected Products

Avast Antivirus

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-10101 · Security Note
• https://twitter.com/CVEnew/status/1995519567087477224 · Twitter Post
• https://t.me/true_secator/7687 · Telegram Post
• https://twitter.com/DFIR_Lab/status/2065631597815029895 · Twitter Post
• https://gendigital.com/us/en/contact-us/security-advisories · Note
• https://t.me/cveNotify/167324 · Telegram Post