Description
Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus engine process.

This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.64.
Published: 2026-06-12
Score: 5.5 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a null pointer dereference in the Avira Antivirus engine triggered while parsing a malformed Windows Portable Executable file. The flaw does not provide direct code execution or information disclosure; instead, it causes the antivirus process to crash, resulting in a denial of service for the scanner. The weakness is classified as CWE‑476.

Affected Systems

Avira Antivirus, released by Gen Digital, is affected on Windows, macOS, and Linux platforms. Any engine build prior to 8.3.70.64 may crash when it receives a malformed PE file.

Risk and Exploitability

The CVSS score of 5.5 indicates a medium severity impact. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Attackers likely need to deliver a crafted PE file to the engine, which could be achieved via file upload, email attachment, or local execution when the antivirus scans a target directory. The risk is limited to causing a service interruption rather than privilege escalation or data theft.

Generated by OpenCVE AI on June 12, 2026 at 23:21 UTC.

Remediation

Vendor Solution

Upgrade to Avira scan engine build 8.3.70.64 or any later engine release. Builds at or above 8.3.70.64 include the fix.

OpenCVE Recommended Actions

  • Upgrade the Avira scan engine to build 8.3.70.64 or any later release, which contains the necessary fix.
  • Ensure all installations of Avira Antivirus on affected platforms are updated to the patched engine build.
  • Implement extra file validation logic on CTI systems that intercept file uploads or transmissions, so that malformed PE files are rejected before being sent to the antivirus engine.

Generated by OpenCVE AI on June 12, 2026 at 23:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 12 Jun 2026 22:15:00 +0000

Type Values Removed Values Added
Description Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.64.
Title Avira antivirus engine null pointer dereference when scanning a malformed PE file
Weaknesses CWE-476
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: GEN

Published:

Updated: 2026-06-12T22:13:49.820Z

Reserved: 2025-07-02T12:01:13.717Z

Link: CVE-2025-7018

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-06-12T22:16:49.467

Modified: 2026-06-12T22:16:49.467

Link: CVE-2025-7018

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-12T23:30:08Z

Weaknesses