Is CVE-2025-7010 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-7010 being exploited in the wild.

How severe is CVE-2025-7010?

Medium severity, with a CVSS score of 5.5, published 12 June 2026.

Which products and versions are affected?

Gen Digital Avast Antivirus VPS builds before 25021208; Gen Digital Avast Business Antivirus VPS builds before 25021208; Gen Digital Avast One VPS builds before 25021208; Gen Digital AVG Antivirus VPS builds before 25021208; and 1 more.

Is there a fix for CVE-2025-7010?

A patch was published on 2025-02-12: Fixed in VPS build 25021208 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2025-7010 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2025-7010?

Check whether you run Gen Digital Avast Antivirus, Gen Digital Avast Business Antivirus, Gen Digital Avast One or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-7010: Gen Digital Antivirus stack overflow in PDF scanning engine

CVE-2025-7010 · Severity: medium · CVSS 5.5 · Published 2026-06-12

A vulnerability in the scanning engine used by Avast, AVG, and Norton antivirus products could allow a specially crafted PDF file to crash the security software. This occurs when the antivirus attempts to scan a malformed file, leading to a 'Denial-of-Service' where the protection process stops functioning. While this does not directly expose data, it can leave the system unprotected against other threats until the service is restarted or the file is removed.

Technologies: Gen Digital Avast Antivirus, Gen Digital Avast Business Antivirus, Gen Digital Avast One, Gen Digital AVG Antivirus, Gen Digital Norton Antivirus. Vendors: Gen Digital.

Quick answers

Is CVE-2025-7010 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-7010 being exploited in the wild.
How severe is CVE-2025-7010?: Medium severity, with a CVSS score of 5.5, published 12 June 2026.
Which products and versions are affected?: Gen Digital Avast Antivirus VPS builds before 25021208; Gen Digital Avast Business Antivirus VPS builds before 25021208; Gen Digital Avast One VPS builds before 25021208; Gen Digital AVG Antivirus VPS builds before 25021208; and 1 more.
Is there a fix for CVE-2025-7010?: A patch was published on 2025-02-12: Fixed in VPS build 25021208 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-7010 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2025-7010?: Check whether you run Gen Digital Avast Antivirus, Gen Digital Avast Business Antivirus, Gen Digital Avast One or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stack overflow vulnerability exists in the shared Gen Digital scanning engine due to uncontrolled recursion (CWE-674). The issue is triggered when the antivirus engine parses a specifically malformed PDF file during a scan. An attacker can exploit this by providing a crafted PDF to the system, which, when scanned, causes the antivirus process to crash (Denial-of-Service). The vulnerability is present in the virus definition (VPS) stream rather than the core application binaries. It affects multiple product lines across Windows, macOS, and Linux. A fix has been released via the automated virus definition update channel in VPS build 25021208.

Affected products

Gen Digital Avast Antivirus VPS builds before 25021208
Gen Digital AVG Antivirus VPS builds before 25021208
Gen Digital Norton Antivirus VPS builds before 25021208
Gen Digital Avast One VPS builds before 25021208
Gen Digital Avast Business Antivirus VPS builds before 25021208

Timeline

2026-06-12: disclosed
2026-06-12: advisory
2025-02-12: patched: Fixed in VPS build 25021208

References

https://www.gendigital.com/us/en/contact-us/security-advisories/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.