CVE Feed

    Dashboard / CVE / CVE-2025-14098

    CVE-2025-14098

    Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malformed MS-DOS executable file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.104.

    Published:Jun 12, 2026
    Last Modified:Jun 15, 2026
    EPS:Jun 12, 2026
    EPSS Score:0.00122
    CVSS Score:7.8

    Affected Products

    Vendor
    Gen Digital
    Product
    Avira Antivirus

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2026-6676 (CVSS 7.8) — Heap buffer out-of-bounds write vulnerability in Avira Antivirus engine when scanning a malformed POSIX tar ar…
    CVE-2025-9033 (CVSS 7.8) — Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may …
    CVE-2025-9032 (CVSS 7.8) — Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows PE fi…
    CVE-2025-7018 (CVSS 5.5) — Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may…
    CVE-2025-7017 (CVSS 7.8) — Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI f…
    CVE-2025-7003 (CVSS 7.8) — Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may …
    CVE-2025-7002 (CVSS 7.8) — Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High