CVE-2025-20234
ClamAV UDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit this vulnerability by submitting a crafted file containing UDF content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process, resulting in a DoS condition on the affected software. For a description of this vulnerability, see the .
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
ClamAV UDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit this vulnerability by submitting a crafted file containing UDF content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process, resulting in a DoS condition on the affected software. For a description of this vulnerability, see the .
- Record
CVE-2025-20234- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-125
- Updated
- 2026-11-02
EUVDEUVD-2025-27685
A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit this vulnerability by submitting a crafted file containing UDF content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process, resulting in a DoS condition on the affected software. For a description of this vulnerability, see the .
- Record
EUVD-2025-27685- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-xwph-f2wp-xxgp
A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an...
A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit this vulnerability by submitting a crafted file containing UDF content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process, resulting in a DoS condition on the affected software. For a description of this vulnerability, see the .
- Record
GHSA-xwph-f2wp-xxgp- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-125
- Updated
- 2026-11-02
NVD
A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit this vulnerability by submitting a crafted file containing UDF content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process, resulting in a DoS condition on the affected software. For a description of this vulnerability, see the .
- Record
CVE-2025-20234- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSV
A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit this vulnerability by submitting a crafted file containing UDF content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process, resulting in a DoS condition on the affected software. For a description of this vulnerability, see the .
- Record
CVE-2025-20234- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-20234
A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit this vulnerability by submitting a crafted file containing UDF content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process, resulting in a DoS condition on the affected software. For a description of this vulnerability, see the .
- Record
DEBIAN-CVE-2025-20234- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 9 moreShow less
OSVUBUNTU-CVE-2025-20234
A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit this vulnerability by submitting a crafted file containing UDF content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process, resulting in a DoS condition on the affected software. For a description of this vulnerability, see the .
- Record
UBUNTU-CVE-2025-20234- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2025-1756202550 No score
Fix of 9 CVEs
- Update up to 1.4.3 LTS
- CVE-2025-20260
- CVE-2025-20234
- CVE-2025-20128
- CVE-2024-20505, CVE-2024-20506
- CVE-2023-20197
- CVE-2023-20212
- CVE-2023-20032
- CVE-2023-20052
- Record
CLSA-2025-1756202550- Updated
- 2026-11-02
OSVCLSA-2025-1756409595 No score
clamav: Fix of 4 CVEs
- Update to 1.4.3 LTS
- CVE-2025-20260: Fixed a possible buffer overflow write bug in the PDF file parser
- CVE-2025-20234: Fixed a possible buffer overflow read bug in the UDF file parser
- CVE-2025-20128: Fixed a possible buffer overflow read bug in the OLE2 file parser
- CVE-2024-20506: Changed the logging module to disable following symlinks on Linux and Unix systems so as to prevent an attacker with existing access to the 'clamd' or 'freshclam' services from using a symlink to corrupt system files
- Record
CLSA-2025-1756409595- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15211-1 No score
clamav-1.4.3-1.1 on GA media
These are all security issues fixed in the clamav-1.4.3-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15211-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02119-1 No score
Security update for clamav
This update for clamav fixes the following issues:
ClamAV version 1.4.3:
- CVE-2025-20260: PDF Scanning Buffer Overflow Vulnerability (bsc#1245054).
- CVE-2025-20234: Vulnerability in Universal Disk Format (UDF) processing (bsc#1245055).
Other bugfixes:
- Fix a race condition between the mockup servers started by different test cases in freshclam_test.py (bsc#1243565)
- Record
SUSE-SU-2025:02119-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02200-1 No score
Security update for clamav
This update for clamav fixes the following issues:
ClamAV version 1.4.3:
- CVE-2025-20260: PDF Scanning Buffer Overflow Vulnerability (bsc#1245054).
- CVE-2025-20234: Vulnerability in Universal Disk Format (UDF) processing (bsc#1245055).
- Record
SUSE-SU-2025:02200-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02201-1 No score
Security update for clamav
This update for clamav fixes the following issues:
ClamAV version 1.4.3:
- CVE-2025-20260: PDF Scanning Buffer Overflow Vulnerability (bsc#1245054).
- CVE-2025-20234: Vulnerability in Universal Disk Format (UDF) processing (bsc#1245055).
Other bugfixes:
- Fix a race condition between the mockup servers started by different test cases in freshclam_test.py (bsc#1243565)
- Record
SUSE-SU-2025:02201-1- Updated
- 2026-11-02
OSVUSN-7615-1 No score
clamav vulnerabilities
It was discovered that ClamAV incorrectly handled scanning UDF files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2025-20234)
It was discovered that ClamAV incorrectly handled scanning PDF files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-20260)
- Record
USN-7615-1- Updated
- 2026-11-02
OSVUSN-7615-2 No score
clamav vulnerabilities
USN-7615-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that ClamAV incorrectly handled scanning UDF files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2025-20234)
It was discovered that ClamAV incorrectly handled scanning PDF files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-20260)
- Record
USN-7615-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
clamavTuxCare:Ubuntu:18.04 From an advisory covering 9 CVEs |
before 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 | 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 |
clamav-baseTuxCare:Ubuntu:18.04 From an advisory covering 9 CVEs |
before 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 | 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 |
clamav-daemonTuxCare:Ubuntu:18.04 From an advisory covering 9 CVEs |
before 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 | 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 |
clamav-docTuxCare:Ubuntu:18.04 From an advisory covering 9 CVEs |
before 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 | 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 |
clamav-docsTuxCare:Ubuntu:18.04 From an advisory covering 9 CVEs |
before 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 | 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 |
clamav-freshclamTuxCare:Ubuntu:18.04 From an advisory covering 9 CVEs |
before 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 | 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 |
clamav-milterTuxCare:Ubuntu:18.04 From an advisory covering 9 CVEs |
before 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 | 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 |
clamav-testfilesTuxCare:Ubuntu:18.04 From an advisory covering 9 CVEs |
before 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 | 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 |
clamdscanTuxCare:Ubuntu:18.04 From an advisory covering 9 CVEs |
before 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 | 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 |
libclamav-devTuxCare:Ubuntu:18.04 From an advisory covering 9 CVEs |
before 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 | 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 |
Show 39 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libclamav12TuxCare:Ubuntu:18.04 From an advisory covering 9 CVEs |
before 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 | 1.4.3+dfsg-0ubuntu0.18.04.1+tuxcare.els1 |
clamavTuxCare:CentOS:7 From an advisory covering 4 CVEs |
before 1:1.4.3-1.el7.tuxcare.els1 | 1:1.4.3-1.el7.tuxcare.els1 |
clamav-dataTuxCare:CentOS:7 From an advisory covering 4 CVEs |
before 1:1.4.3-1.el7.tuxcare.els1 | 1:1.4.3-1.el7.tuxcare.els1 |
clamav-develTuxCare:CentOS:7 From an advisory covering 4 CVEs |
before 1:1.4.3-1.el7.tuxcare.els1 | 1:1.4.3-1.el7.tuxcare.els1 |
clamav-docTuxCare:CentOS:7 From an advisory covering 4 CVEs |
before 1:1.4.3-1.el7.tuxcare.els1 | 1:1.4.3-1.el7.tuxcare.els1 |
clamav-filesystemTuxCare:CentOS:7 From an advisory covering 4 CVEs |
before 1:1.4.3-1.el7.tuxcare.els1 | 1:1.4.3-1.el7.tuxcare.els1 |
clamav-freshclamTuxCare:CentOS:7 From an advisory covering 4 CVEs |
before 1:1.4.3-1.el7.tuxcare.els1 | 1:1.4.3-1.el7.tuxcare.els1 |
clamav-libTuxCare:CentOS:7 From an advisory covering 4 CVEs |
before 1:1.4.3-1.el7.tuxcare.els1 | 1:1.4.3-1.el7.tuxcare.els1 |
clamav-milterTuxCare:CentOS:7 From an advisory covering 4 CVEs |
before 1:1.4.3-1.el7.tuxcare.els1 | 1:1.4.3-1.el7.tuxcare.els1 |
clamdTuxCare:CentOS:7 From an advisory covering 4 CVEs |
before 1:1.4.3-1.el7.tuxcare.els1 | 1:1.4.3-1.el7.tuxcare.els1 |
clamavDebian:13 |
before 1.4.3+dfsg-1 | 1.4.3+dfsg-1 |
clamavDebian:14 |
before 1.4.3+dfsg-1 | 1.4.3+dfsg-1 |
clamavSUSE:Linux Enterprise Micro 5.5 From an advisory covering 2 CVEs |
before 1.4.3-150200.8.14.1 | 1.4.3-150200.8.14.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 2 CVEs |
before 1.4.3-150200.8.14.1 | 1.4.3-150200.8.14.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 2 CVEs |
before 1.4.3-150200.8.14.1 | 1.4.3-150200.8.14.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 2 CVEs |
before 1.4.3-150200.8.14.1 | 1.4.3-150200.8.14.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 2 CVEs |
before 1.4.3-150200.8.14.1 | 1.4.3-150200.8.14.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 2 CVEs |
before 1.4.3-150200.8.14.1 | 1.4.3-150200.8.14.1 |
clamavSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 2 CVEs |
before 1.4.3-150200.8.14.1 | 1.4.3-150200.8.14.1 |
clamavSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 2 CVEs |
before 1.4.3-150200.8.14.1 | 1.4.3-150200.8.14.1 |
clamavSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 2 CVEs |
before 1.4.3-150200.8.14.1 | 1.4.3-150200.8.14.1 |
clamavSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 2 CVEs |
before 1.4.3-150200.8.14.1 | 1.4.3-150200.8.14.1 |
clamavSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 2 CVEs |
before 1.4.3-150200.8.14.1 | 1.4.3-150200.8.14.1 |
clamavSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 2 CVEs |
before 1.4.3-150200.8.14.1 | 1.4.3-150200.8.14.1 |
clamavSUSE:Manager Proxy 4.3 From an advisory covering 2 CVEs |
before 1.4.3-150200.8.14.1 | 1.4.3-150200.8.14.1 |
clamavSUSE:Manager Server 4.3 From an advisory covering 2 CVEs |
before 1.4.3-150200.8.14.1 | 1.4.3-150200.8.14.1 |
clamavSUSE:Enterprise Storage 7.1 From an advisory covering 2 CVEs |
before 1.4.3-150200.8.14.1 | 1.4.3-150200.8.14.1 |
clamavSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 2 CVEs |
before 1.4.3-150600.18.18.1 | 1.4.3-150600.18.18.1 |
clamavSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 2 CVEs |
before 1.4.3-150600.18.18.1 | 1.4.3-150600.18.18.1 |
clamavopenSUSE:Leap 15.6 From an advisory covering 2 CVEs |
before 1.4.3-150600.18.18.1 | 1.4.3-150600.18.18.1 |
clamavSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 2 CVEs |
before 1.4.3-3.47.1 | 1.4.3-3.47.1 |
clamavSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 2 CVEs |
before 1.4.3-3.47.1 | 1.4.3-3.47.1 |
clamavUbuntu:Pro:20.04:LTS |
before 1.4.3+dfsg-0ubuntu0.20.04.1+esm1, plus listed versions 0.101.4+dfsg-1ubuntu10.102.1+dfsg-1ubuntu10.102.1+dfsg-2ubuntu10.102.1+dfsg-2ubuntu20.102.2+dfsg-1ubuntu1 Show 11 moreShow less0.102.2+dfsg-2ubuntu10.102.3+dfsg-0ubuntu0.20.04.10.102.4+dfsg-0ubuntu0.20.04.10.103.2+dfsg-0ubuntu0.20.04.10.103.2+dfsg-0ubuntu0.20.04.20.103.5+dfsg-1~20.04.10.103.6+dfsg-0ubuntu0.20.04.10.103.8+dfsg-0ubuntu0.20.04.10.103.9+dfsg-0ubuntu0.20.04.10.103.11+dfsg-0ubuntu0.20.04.10.103.12+dfsg-0ubuntu0.20.04.1 |
1.4.3+dfsg-0ubuntu0.20.04.1+esm1 |
clamavUbuntu:22.04:LTS |
before 1.4.3+dfsg-0ubuntu0.22.04.1, plus listed versions 0.103.3+dfsg-10.103.4+dfsg-10.103.4+dfsg-1build10.103.5+dfsg-10.103.6+dfsg-0ubuntu0.22.04.1 Show 4 moreShow less0.103.8+dfsg-0ubuntu0.22.04.10.103.9+dfsg-0ubuntu0.22.04.10.103.11+dfsg-0ubuntu0.22.04.10.103.12+dfsg-0ubuntu0.22.04.1 |
1.4.3+dfsg-0ubuntu0.22.04.1 |
clamavUbuntu:24.04:LTS |
before 1.4.3+dfsg-0ubuntu0.24.04.1, plus listed versions 1.0.2+dfsg-1ubuntu11.0.3+dfsg-2ubuntu11.0.4+dfsg-0ubuntu11.0.5+dfsg-1ubuntu11.0.5+dfsg-1.1ubuntu21.0.5+dfsg-1.1ubuntu31.0.7+dfsg-0ubuntu0.24.04.11.0.8+dfsg-0ubuntu0.24.04.1 |
1.4.3+dfsg-0ubuntu0.24.04.1 |
clamavUbuntu:22.04:LTS From an advisory covering 2 CVEs |
before 1.4.3+dfsg-0ubuntu0.22.04.1, plus listed versions 0.103.3+dfsg-10.103.4+dfsg-10.103.4+dfsg-1build10.103.5+dfsg-10.103.6+dfsg-0ubuntu0.22.04.1 Show 4 moreShow less0.103.8+dfsg-0ubuntu0.22.04.10.103.9+dfsg-0ubuntu0.22.04.10.103.11+dfsg-0ubuntu0.22.04.10.103.12+dfsg-0ubuntu0.22.04.1 |
1.4.3+dfsg-0ubuntu0.22.04.1 |
clamavUbuntu:24.04:LTS From an advisory covering 2 CVEs |
before 1.4.3+dfsg-0ubuntu0.24.04.1, plus listed versions 1.0.2+dfsg-1ubuntu11.0.3+dfsg-2ubuntu11.0.4+dfsg-0ubuntu11.0.5+dfsg-1ubuntu11.0.5+dfsg-1.1ubuntu21.0.5+dfsg-1.1ubuntu31.0.7+dfsg-0ubuntu0.24.04.11.0.8+dfsg-0ubuntu0.24.04.1 |
1.4.3+dfsg-0ubuntu0.24.04.1 |
clamavUbuntu:Pro:20.04:LTS From an advisory covering 2 CVEs |
before 1.4.3+dfsg-0ubuntu0.20.04.1+esm1, plus listed versions 0.101.4+dfsg-1ubuntu10.102.1+dfsg-1ubuntu10.102.1+dfsg-2ubuntu10.102.1+dfsg-2ubuntu20.102.2+dfsg-1ubuntu1 Show 11 moreShow less0.102.2+dfsg-2ubuntu10.102.3+dfsg-0ubuntu0.20.04.10.102.4+dfsg-0ubuntu0.20.04.10.103.2+dfsg-0ubuntu0.20.04.10.103.2+dfsg-0ubuntu0.20.04.20.103.5+dfsg-1~20.04.10.103.6+dfsg-0ubuntu0.20.04.10.103.8+dfsg-0ubuntu0.20.04.10.103.9+dfsg-0ubuntu0.20.04.10.103.11+dfsg-0ubuntu0.20.04.10.103.12+dfsg-0ubuntu0.20.04.1 |
1.4.3+dfsg-0ubuntu0.20.04.1+esm1 |
clamavopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 1.4.3-1.1 | 1.4.3-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-20234 is a medium vulnerability (CVSS 5.3) in Clamav, published June 18, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.82%, the 57th percentile. Fixed in clamav 1.4.3+dfsg-1.
References
sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-udf-hmwd9nDy
blog.clamav.net/2025/06/clamav-143-and-109-security-patch.html
nvd.nist.gov/vuln/detail/CVE-2025-20234
github.com/advisories/GHSA-xwph-f2wp-xxgp
errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1756202550.html
Show 14 moreShow less
security-tracker.debian.org/tracker/CVE-2025-20234
suse.com/support/update/announcement/2025/suse-su-202502119-1
bugzilla.suse.com/1243565
ubuntu.com/security/CVE-2025-20234
cve.org/CVERecord?id=CVE-2025-20234