CVE-2025-10101: Avast antivirus heap buffer OOB read when scanning a malformed Mach-O file
Gen Digital · Avast Antivirus
Vendor fix available · Affected: Gen Digital Avast Antivirus · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 8% of scored CVEs
DescriptionCVE.org
Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Mach-O file may allow Local Execution of Code or Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds before VPS 25090300. The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.
Affected products5
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Gen Digital · Avast Antivirusbefore 25090300
- Gen Digital · AVG Antivirusbefore 25090300
- Gen Digital · Norton Antivirusbefore 25090300
- Gen Digital · Avast Onebefore 25090300
- Gen Digital · Avast Business Antivirusbefore 25090300
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Gen Digital
- Published
- December 2025
CoverageNo articles yet
No CyberSIXT article names CVE-2025-10101 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.