CVE-2025-7007 HIGH

CVE-2025-7007: Null pointer dereference in Avast Antivirus on macOS (16.0.0) or Linux (3.0.3)

Vendor Avast
Product Antivirus
Weakness CWE-476
Published December 1, 2025
Last update December 1, 2025
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

NULL Pointer Dereference vulnerability in Avast Antivirus on MacOS, Avast Anitvirus on Linux when scanning a malformed Windows PE file causes the antivirus process to crash.This issue affects Antivirus: 16.0.0; Anitvirus: 3.0.3.

Key dates

02Disclosure timeline

December 1, 2025 CVE published
December 1, 2025 Record updated