OSV-2025-248
Heap-buffer-overflow in cli_bm_addpatt
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407448850
Crash type: Heap-buffer-overflow READ 1
Crash state:
cli_bm_addpatt
add_hash
load_regex_matcher
What each source reports
OSV No score
Heap-buffer-overflow in cli_bm_addpatt
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407448850
Crash type: Heap-buffer-overflow READ 1
Crash state:
cli_bm_addpatt
add_hash
load_regex_matcher
- Record
OSV-2025-248- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
clamavOSS-Fuzz |
Listed versions, plus commit ranges clamav-0.104.3clamav-0.104.4clamav-0.105.0clamav-0.105.0-rcclamav-0.105.0-rc2 Show 33 moreShow lessclamav-0.105.1clamav-0.105.2clamav-1.0.0clamav-1.0.0-rcclamav-1.0.0-rc2clamav-1.0.1clamav-1.0.2clamav-1.0.3clamav-1.0.4clamav-1.0.5clamav-1.0.6clamav-1.0.7clamav-1.0.8clamav-1.1.0clamav-1.1.0-rcclamav-1.1.1clamav-1.1.2clamav-1.1.3clamav-1.2.0clamav-1.2.0-rcclamav-1.2.1clamav-1.2.2clamav-1.2.3clamav-1.3.0clamav-1.3.0-rcclamav-1.3.0-rc2clamav-1.3.1clamav-1.3.2clamav-1.4.0clamav-1.4.0-rcclamav-1.4.1clamav-1.4.2clamav-1.5.0-beta |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2025-248 is a vulnerability with no CVSS score yet in clamav, published April 2, 2025. No source lists public exploit code. A source reports a fix.