{"id":"CVE-2026-20339","aliases":["ALPINE-CVE-2026-20339","AZL-95453","DEBIAN-CVE-2026-20339","EUVD-2026-54506","GHSA-g59m-qx73-q3c6","MGASA-2026-0348","SUSE-SU-2026:23706-1","SUSE-SU-2026:23727-1","SUSE-SU-2026:4179-1","SUSE-SU-2026:4180-1","SUSE-SU-2026:4208-1","UBUNTU-CVE-2026-20339","USN-8788-1","openSUSE-SU-2026:11583-1","openSUSE-SU-2026:21831-1"],"status":"published","title":"ClamAV PESpin File Format Processing Integer Overflow Vulnerability","description":"A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an integer overflow. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00559,"percentile":0.46869,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2026-08-07T16:42:33Z","modified":"2026-11-03T06:32:53Z","fixes":[{"ecosystem":"Alpine:v3.24","package":"clamav","fixed_in":["1.4.6-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"clamav","fixed_in":["1.5.4-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"clamav","fixed_in":["1.4.6+dfsg-0+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"clamav","fixed_in":["1.4.6+dfsg-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"clamav","fixed_in":["1.5.4+dfsg-0ubuntu0.22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"clamav","fixed_in":["1.5.4+dfsg-0ubuntu0.24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"clamav","fixed_in":["1.5.4+dfsg-0ubuntu0.26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.24","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6+dfsg-0+deb12u1"}]}],"versions":["1.0.1+dfsg-2","1.0.2+dfsg-1","1.0.2+dfsg-1~deb12u1","1.0.3+dfsg-1","1.0.3+dfsg-1~deb12u1","1.0.3+dfsg-2","1.0.4+dfsg-1","1.0.5+dfsg-1","1.0.5+dfsg-1.1","1.0.5+dfsg-1~deb12u1","1.0.6+dfsg-1","1.0.7+dfsg-1~deb11u1","1.0.7+dfsg-1~deb11u2","1.0.7+dfsg-1~deb12u1","1.0.9+dfsg-1~deb11u1","1.0.9+dfsg-1~deb12u1","1.2.1+dfsg-1","1.2.1+dfsg-2","1.2.1+dfsg-3","1.3.1+dfsg-1","1.3.1+dfsg-2","1.3.1+dfsg-3","1.3.1+dfsg-4","1.3.1+dfsg-5","1.4.1+dfsg-1","1.4.2+dfsg-1","1.4.3+dfsg-1","1.4.3+dfsg-1~deb11u1","1.4.3+dfsg-1~deb12u1","1.4.3+dfsg-1~deb12u2","1.4.3+dfsg-2","1.4.4+dfsg-1","1.4.4+dfsg-2","1.4.5+dfsg-1","1.4.5+dfsg-2","1.4.5+dfsg-3"]},{"source":"osv","ecosystem":"Debian:13","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.3+dfsg-1","1.4.3+dfsg-2","1.4.4+dfsg-1","1.4.4+dfsg-2","1.4.5+dfsg-1","1.4.5+dfsg-2","1.4.5+dfsg-3","1.4.6+dfsg-1","1.4.6+dfsg-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6+dfsg-1"}]}],"versions":["1.4.3+dfsg-1","1.4.3+dfsg-2","1.4.4+dfsg-1","1.4.4+dfsg-2","1.4.5+dfsg-1","1.4.5+dfsg-2","1.4.5+dfsg-3","1.4.6+dfsg-1~deb13u1"]},{"source":"osv","ecosystem":"Mageia:10","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6-1.mga10"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-3.59.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-3.59.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150600.18.31.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150600.18.31.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150600.18.31.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.97.8+dfsg-1ubuntu4","0.97.8+dfsg-1ubuntu5","0.98.1+dfsg-1ubuntu4","0.98.1+dfsg-1ubuntu5","0.98.1+dfsg-2ubuntu2","0.98.1+dfsg-4ubuntu1","0.98.1+dfsg-4ubuntu1.1","0.98.5+addedllvm-0ubuntu0.14.04.1","0.98.6+dfsg-0ubuntu0.14.04.1","0.98.7+dfsg-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.2","0.99.3+addedllvm-0ubuntu0.14.04.1","0.99.4+addedllvm-0ubuntu0.14.04.1","0.100.1+dfsg-1ubuntu0.14.04.1","0.100.1+dfsg-1ubuntu0.14.04.2","0.100.1+dfsg-1ubuntu0.14.04.3","0.100.1+dfsg-1ubuntu0.14.04.4","0.100.2+dfsg-1ubuntu0.14.04.1","0.100.2+dfsg-1ubuntu0.14.04.2","0.100.3+dfsg-0ubuntu0.14.04.1","0.100.3+dfsg-0ubuntu0.14.04.1+esm1","0.101.4+dfsg-0ubuntu0.14.04.1+esm1","0.102.1+dfsg-0ubuntu0.14.04.1+esm1","0.102.2+dfsg-0ubuntu0.14.04.1+esm1","0.102.3+dfsg-0ubuntu0.14.04.1+esm1","0.102.4+dfsg-0ubuntu0.14.04.1+esm1","0.103.2+dfsg-0ubuntu0.14.04.1+esm1","0.103.2+dfsg-0ubuntu0.14.04.1+esm2","0.103.5+dfsg-0ubuntu0.14.04.1+esm1","0.103.6+dfsg-0ubuntu0.14.04.1+esm1","0.103.8+dfsg-0ubuntu0.14.04.1+esm1","0.103.9+dfsg-0ubuntu0.14.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.98.7+dfsg-0ubuntu4","0.98.7+dfsg-0ubuntu5","0.99+dfsg-1ubuntu1","0.99+dfsg-1ubuntu1.1","0.99+dfsg-1ubuntu1.2","0.99.2+dfsg-0ubuntu0.16.04.1","0.99.2+dfsg-0ubuntu0.16.04.2","0.99.2+dfsg-0ubuntu0.16.04.3","0.99.3+addedllvm-0ubuntu0.16.04.1","0.99.4+addedllvm-0ubuntu0.16.04.1","0.100.1+dfsg-1ubuntu0.16.04.1","0.100.1+dfsg-1ubuntu0.16.04.2","0.100.1+dfsg-1ubuntu0.16.04.3","0.100.2+dfsg-1ubuntu0.16.04.1","0.100.3+dfsg-0ubuntu0.16.04.1","0.101.4+dfsg-0ubuntu0.16.04.1","0.102.1+dfsg-0ubuntu0.16.04.2","0.102.2+dfsg-0ubuntu0.16.04.1","0.102.3+dfsg-0ubuntu0.16.04.1","0.102.4+dfsg-0ubuntu0.16.04.1","0.103.2+dfsg-0ubuntu0.16.04.1","0.103.2+dfsg-0ubuntu0.16.04.1+esm1","0.103.5+dfsg-0ubuntu0.16.04.1+esm1","0.103.6+dfsg-0ubuntu0.16.04.1+esm1","0.103.8+dfsg-0ubuntu0.16.04.1+esm1","0.103.9+dfsg-0ubuntu0.16.04.1+esm1","0.103.12+dfsg-0ubuntu0.16.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.99.2+dfsg-6ubuntu2","0.99.3~beta1+dfsg-2ubuntu1","0.99.3~beta1+dfsg-2ubuntu2","0.99.3+addedllvm-0ubuntu1","0.99.3+addedllvm-0ubuntu2","0.99.4+addedllvm-0ubuntu1","0.100.1+dfsg-1ubuntu0.18.04.1","0.100.1+dfsg-1ubuntu0.18.04.2","0.100.1+dfsg-1ubuntu0.18.04.3","0.100.2+dfsg-1ubuntu0.18.04.1","0.100.3+dfsg-0ubuntu0.18.04.1","0.101.4+dfsg-0ubuntu0.18.04.1","0.102.1+dfsg-0ubuntu0.18.04.2","0.102.2+dfsg-0ubuntu0.18.04.1","0.102.3+dfsg-0ubuntu0.18.04.1","0.102.4+dfsg-0ubuntu0.18.04.1","0.103.2+dfsg-0ubuntu0.18.04.1","0.103.2+dfsg-0ubuntu0.18.04.2","0.103.2+dfsg-0ubuntu0.18.04.3","0.103.5+dfsg-0ubuntu0.18.04.1","0.103.6+dfsg-0ubuntu0.18.04.1","0.103.8+dfsg-0ubuntu0.18.04.1","0.103.9+dfsg-0ubuntu0.18.04.1+esm1","0.103.12+dfsg-0ubuntu0.18.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.101.4+dfsg-1ubuntu1","0.102.1+dfsg-1ubuntu1","0.102.1+dfsg-2ubuntu1","0.102.1+dfsg-2ubuntu2","0.102.2+dfsg-1ubuntu1","0.102.2+dfsg-2ubuntu1","0.102.3+dfsg-0ubuntu0.20.04.1","0.102.4+dfsg-0ubuntu0.20.04.1","0.103.2+dfsg-0ubuntu0.20.04.1","0.103.2+dfsg-0ubuntu0.20.04.2","0.103.5+dfsg-1~20.04.1","0.103.6+dfsg-0ubuntu0.20.04.1","0.103.8+dfsg-0ubuntu0.20.04.1","0.103.9+dfsg-0ubuntu0.20.04.1","0.103.11+dfsg-0ubuntu0.20.04.1","0.103.12+dfsg-0ubuntu0.20.04.1","1.4.3+dfsg-0ubuntu0.20.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.22.04.1"}]}],"versions":["0.103.3+dfsg-1","0.103.4+dfsg-1","0.103.4+dfsg-1build1","0.103.5+dfsg-1","0.103.6+dfsg-0ubuntu0.22.04.1","0.103.8+dfsg-0ubuntu0.22.04.1","0.103.9+dfsg-0ubuntu0.22.04.1","0.103.11+dfsg-0ubuntu0.22.04.1","0.103.12+dfsg-0ubuntu0.22.04.1","1.4.3+dfsg-0ubuntu0.22.04.1","1.4.4+dfsg-0ubuntu0.22.04.1","1.5.3+dfsg-0ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.24.04.1"}]}],"versions":["1.0.2+dfsg-1ubuntu1","1.0.3+dfsg-2ubuntu1","1.0.4+dfsg-0ubuntu1","1.0.5+dfsg-1ubuntu1","1.0.5+dfsg-1.1ubuntu2","1.0.5+dfsg-1.1ubuntu3","1.0.7+dfsg-0ubuntu0.24.04.1","1.0.8+dfsg-0ubuntu0.24.04.1","1.4.3+dfsg-0ubuntu0.24.04.1","1.4.4+dfsg-0ubuntu0.24.04.1","1.5.3+dfsg-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.26.04.1"}]}],"versions":["1.4.3+dfsg-0ubuntu2","1.4.3+dfsg-0ubuntu3","1.4.3+dfsg-2ubuntu1","1.4.3+dfsg-2ubuntu2","1.4.3+dfsg-2ubuntu3","1.4.4+dfsg-0ubuntu0.26.04.1","1.5.3+dfsg-0ubuntu0.26.04.1","1.5.3+dfsg-0ubuntu0.26.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.22.04.1"}]}],"versions":["0.103.3+dfsg-1","0.103.4+dfsg-1","0.103.4+dfsg-1build1","0.103.5+dfsg-1","0.103.6+dfsg-0ubuntu0.22.04.1","0.103.8+dfsg-0ubuntu0.22.04.1","0.103.9+dfsg-0ubuntu0.22.04.1","0.103.11+dfsg-0ubuntu0.22.04.1","0.103.12+dfsg-0ubuntu0.22.04.1","1.4.3+dfsg-0ubuntu0.22.04.1","1.4.4+dfsg-0ubuntu0.22.04.1","1.5.3+dfsg-0ubuntu0.22.04.2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.24.04.1"}]}],"versions":["1.0.2+dfsg-1ubuntu1","1.0.3+dfsg-2ubuntu1","1.0.4+dfsg-0ubuntu1","1.0.5+dfsg-1ubuntu1","1.0.5+dfsg-1.1ubuntu2","1.0.5+dfsg-1.1ubuntu3","1.0.7+dfsg-0ubuntu0.24.04.1","1.0.8+dfsg-0ubuntu0.24.04.1","1.4.3+dfsg-0ubuntu0.24.04.1","1.4.4+dfsg-0ubuntu0.24.04.1","1.5.3+dfsg-0ubuntu0.24.04.1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.26.04.1"}]}],"versions":["1.4.3+dfsg-0ubuntu2","1.4.3+dfsg-0ubuntu3","1.4.3+dfsg-2ubuntu1","1.4.3+dfsg-2ubuntu2","1.4.3+dfsg-2ubuntu3","1.4.4+dfsg-0ubuntu0.26.04.1","1.5.3+dfsg-0ubuntu0.26.04.1","1.5.3+dfsg-0ubuntu0.26.04.2"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-160000.1.1"}]}],"bundled":9}],"products":[{"vendor":"cisco","product":"cisco secure endpoint"}],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26","tags":["report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20339","tags":["web"]},{"url":"https://github.com/advisories/GHSA-g59m-qx73-q3c6"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-20339","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-20339","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0348.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36180","tags":["report"]},{"url":"https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQHYDS3XT2PKXIDL3B6FNNJ3JT27FJ2T/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623706-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1271922","tags":["report"]},{"url":"https://bugzilla.suse.com/1274597","tags":["report"]},{"url":"https://bugzilla.suse.com/1274598","tags":["report"]},{"url":"https://bugzilla.suse.com/1274599","tags":["report"]},{"url":"https://bugzilla.suse.com/1274600","tags":["report"]},{"url":"https://bugzilla.suse.com/1274601","tags":["report"]},{"url":"https://bugzilla.suse.com/1274602","tags":["report"]},{"url":"https://bugzilla.suse.com/1274603","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46671","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623727-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264179-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264180-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264208-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-20339","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-20339","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8788-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-20337","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-20338","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-20345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-20346","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-20347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-20348","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-20339","title":"ClamAV PESpin File Format Processing Integer Overflow Vulnerability","description":"A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an integer overflow. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T16:42:33.962Z","modified":"2026-08-07T21:02:22.752Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T13:35:55.731353Z"}],"euvd":[{"id":"EUVD-2026-54506","description":"A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an integer overflow. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T16:42:33Z","modified":"2026-08-07T21:02:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:02:06.573967Z"}],"ghsa":[{"id":"GHSA-g59m-qx73-q3c6","title":"A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote...","description":"A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\n\nThis vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an integer overflow. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T18:31:45Z","modified":"2026-08-07T18:31:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:10:11.66732Z"}],"nvd":[{"id":"CVE-2026-20339","description":"A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an integer overflow. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T17:17:02.807Z","modified":"2026-10-23T20:10:00.16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:12:35.386166Z"}],"osv":[{"id":"ALPINE-CVE-2026-20339","description":"A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an integer overflow. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T17:17:02.807Z","modified":"2026-11-03T06:32:53.027032929Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:26.770911Z"},{"id":"DEBIAN-CVE-2026-20339","description":"A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r \r This vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an integer overflow. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T17:17:02.807Z","modified":"2026-10-24T09:47:33.616753802Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:53.097669Z"},{"id":"UBUNTU-CVE-2026-20339","description":"A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an integer overflow. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T17:17:00Z","modified":"2026-09-21T21:37:56.707013587Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:01.334185Z"},{"id":"AZL-95453","title":"CVE-2026-20339 affecting package clamav for versions less than 1.5.4-1","description":"A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an integer overflow. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T17:17:02Z","modified":"2026-09-10T14:16:46.742376304Z","updated_at":"2026-11-02T15:28:12.028669Z"},{"id":"MGASA-2026-0348","title":"Updated clamav packages fix security vulnerabilities","description":"An indexing error while converting GPT partition names that could read or\nwrite beyond a stack-allocated partition entry. (CVE-2026-20345)\nAn integer overflow in the PESpin unpacker that could allocate an\nundersized buffer and then write beyond it while rebuilding a PE file.\n(CVE-2026-20339)\nAn integer underflow in the PDF parser that could cause a crash while\nreading a malformed hex string. (CVE-2026-20346)\nUndefined behavior and integer overflow in the Mach-O parser that could\ncause a crash while scanning a malformed Mach-O file. (CVE-2026-20347)\nXAR parser size handling that could request an excessive allocation or\nexceed scan limits while decompressing a malformed table of contents.\n(CVE-2026-20348)\n","status":"published","published":"2026-08-31T19:40:26Z","modified":"2026-09-01T03:15:03.645755465Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11583-1","title":"clamav-1.5.4-1.1 on GA media","description":"These are all security issues fixed in the clamav-1.5.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-24T00:00:00Z","modified":"2026-08-26T18:23:37.982310091Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:21831-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n\n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-11T12:01:10Z","modified":"2026-09-13T12:15:04.263684091Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:23706-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n\n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-11T12:00:06Z","modified":"2026-09-29T18:23:21.314210871Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:23727-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n\n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-11T12:00:06Z","modified":"2026-09-29T18:23:13.298145534Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:4179-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n  \n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-14T14:48:44Z","modified":"2026-09-15T17:00:06.098913277Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4180-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: ejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n  \n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-14T14:49:34Z","modified":"2026-09-15T17:00:06.103385082Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4208-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n\n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-16T08:23:41Z","modified":"2026-09-16T21:45:03.610057216Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"USN-8788-1","title":"clamav vulnerabilities","description":"It was discovered that ClamAV incorrectly handled certain zip archive\nfiles. A remote attacker could possibly use this issue to cause ClamAV\nto crash, resulting in a denial of service. (CVE-2026-20337,\nCVE-2026-20338)\n\nIt was discovered that ClamAV incorrectly handled certain PESpin files.\nA remote attacker could possibly use this issue to cause ClamAV to\ncrash, resulting in a denial of service. (CVE-2026-20339)\n\nIt was discovered that ClamAV incorrectly handled certain GPT files. A\nremote attacker could possibly use this issue to cause ClamAV to crash,\nresulting in a denial of service. (CVE-2026-20345)\n\nIt was discovered that ClamAV incorrectly handled certain PDF files. A\nremote attacker could possibly use this issue to cause ClamAV to crash,\nresulting in a denial of service. (CVE-2026-20346)\n\nIt was discovered that ClamAV incorrectly handled certain Mach-O files.\nA remote attacker could possibly use this issue to cause ClamAV to\ncrash, resulting in a denial of service. (CVE-2026-20347)\n\nIt was discovered that ClamAV incorrectly handled certain XAR files. A\nremote attacker could possibly use this issue to cause ClamAV to crash,\nresulting in a denial of service. (CVE-2026-20348)","status":"published","published":"2026-09-21T12:05:10Z","modified":"2026-09-21T21:42:45.295245362Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}