CVE-2025-4134

7.3 highEPSS 0.2%

High (7.3). EPSS 0.2% chance of exploitation in the next 30 days.

Lack of file validation in do_update_vps in Avast Business Antivirus for Linux 4.5 on Linux allows local user to spoof or tamper with the update file via an unverified file write.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWE: CWE-552
Published: 2025-05-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.gendigital.com/us/en/contact-us/security-advisories/

Check your stack JSON