CVE-2025-9033 – Avira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 3)

CVE ID :CVE-2025-9033

Published : June 12, 2026, 11:16 p.m. | 2 hours, 8 minutes ago

Description :Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process.

This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.76.

Severity: 7.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…