Avast Antivirus CVE-2025-7005

The primary fix is a virus definition update to VPS build 25031700 or later, delivered automatically through the standard Gen Digital definition update channel. Administrators should verify that all managed endpoints have received and applied VPS 25031700 or above - this can be confirmed through the AV management console's definition version reporting. For systems with automatic updates enabled and network connectivity, no manual intervention is required. For air-gapped or update-restricted environments, administrators should manually push VPS 25031700 or later from an offline update package obtained from the Gen Digital support portal (see https://www.gendigital.com/us/en/contact-us/security-advisories/). As a compensating control in environments where the definition update cannot be immediately applied, temporarily disabling real-time on-access scanning of PE files or restricting scanning of untrusted PE files from network shares reduces exposure, but note this also reduces malware detection capability during the window. There is no binary patch required - the fix is entirely in the definition build.