Vulnerability · Published Dec 1, 2025 · Assigned by NLOK
CVE-2025-7007Null pointer dereference in Avast Antivirus on macOS (16.0.0) or Linux (3.0.3)
High 7.5
In plain English
A high-severity null pointer dereference in Anitvirus from Avast. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.1%top 98.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
NULL Pointer Dereference vulnerability in Avast Antivirus on MacOS, Avast Anitvirus on Linux when scanning a malformed Windows PE file causes the antivirus process to crash.This issue affects Antivirus: 16.0.0; Anitvirus: 3.0.3.
Affected products (as reported)
Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H