{"id":"CVE-2026-20347","aliases":["ALPINE-CVE-2026-20347","AZL-95447","DEBIAN-CVE-2026-20347","EUVD-2026-54532","GHSA-mph8-4p68-pr43","MGASA-2026-0348","SUSE-SU-2026:23706-1","SUSE-SU-2026:23727-1","SUSE-SU-2026:4179-1","SUSE-SU-2026:4180-1","SUSE-SU-2026:4208-1","UBUNTU-CVE-2026-20347","USN-8788-1","openSUSE-SU-2026:11583-1","openSUSE-SU-2026:21831-1"],"status":"published","title":"ClamAV Mach-O File Format Processing Memory Corruption Vulnerability","description":"A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in Mach-O files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a crafted Mach-O file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00559,"percentile":0.46869,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2026-08-07T16:42:29Z","modified":"2026-11-03T06:33:01Z","fixes":[{"ecosystem":"Alpine:v3.24","package":"clamav","fixed_in":["1.4.6-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"clamav","fixed_in":["1.5.4-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"clamav","fixed_in":["1.4.6+dfsg-0+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"clamav","fixed_in":["1.4.6+dfsg-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"clamav","fixed_in":["1.5.4+dfsg-0ubuntu0.22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"clamav","fixed_in":["1.5.4+dfsg-0ubuntu0.24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"clamav","fixed_in":["1.5.4+dfsg-0ubuntu0.26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.24","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6+dfsg-0+deb12u1"}]}],"versions":["1.0.1+dfsg-2","1.0.2+dfsg-1","1.0.2+dfsg-1~deb12u1","1.0.3+dfsg-1","1.0.3+dfsg-1~deb12u1","1.0.3+dfsg-2","1.0.4+dfsg-1","1.0.5+dfsg-1","1.0.5+dfsg-1.1","1.0.5+dfsg-1~deb12u1","1.0.6+dfsg-1","1.0.7+dfsg-1~deb11u1","1.0.7+dfsg-1~deb11u2","1.0.7+dfsg-1~deb12u1","1.0.9+dfsg-1~deb11u1","1.0.9+dfsg-1~deb12u1","1.2.1+dfsg-1","1.2.1+dfsg-2","1.2.1+dfsg-3","1.3.1+dfsg-1","1.3.1+dfsg-2","1.3.1+dfsg-3","1.3.1+dfsg-4","1.3.1+dfsg-5","1.4.1+dfsg-1","1.4.2+dfsg-1","1.4.3+dfsg-1","1.4.3+dfsg-1~deb11u1","1.4.3+dfsg-1~deb12u1","1.4.3+dfsg-1~deb12u2","1.4.3+dfsg-2","1.4.4+dfsg-1","1.4.4+dfsg-2","1.4.5+dfsg-1","1.4.5+dfsg-2","1.4.5+dfsg-3"]},{"source":"osv","ecosystem":"Debian:13","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.3+dfsg-1","1.4.3+dfsg-2","1.4.4+dfsg-1","1.4.4+dfsg-2","1.4.5+dfsg-1","1.4.5+dfsg-2","1.4.5+dfsg-3","1.4.6+dfsg-1","1.4.6+dfsg-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6+dfsg-1"}]}],"versions":["1.4.3+dfsg-1","1.4.3+dfsg-2","1.4.4+dfsg-1","1.4.4+dfsg-2","1.4.5+dfsg-1","1.4.5+dfsg-2","1.4.5+dfsg-3","1.4.6+dfsg-1~deb13u1"]},{"source":"osv","ecosystem":"Mageia:10","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6-1.mga10"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-3.59.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-3.59.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150600.18.31.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150600.18.31.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150600.18.31.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-150400.13.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.97.8+dfsg-1ubuntu4","0.97.8+dfsg-1ubuntu5","0.98.1+dfsg-1ubuntu4","0.98.1+dfsg-1ubuntu5","0.98.1+dfsg-2ubuntu2","0.98.1+dfsg-4ubuntu1","0.98.1+dfsg-4ubuntu1.1","0.98.5+addedllvm-0ubuntu0.14.04.1","0.98.6+dfsg-0ubuntu0.14.04.1","0.98.7+dfsg-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.1","0.99.2+addedllvm-0ubuntu0.14.04.2","0.99.3+addedllvm-0ubuntu0.14.04.1","0.99.4+addedllvm-0ubuntu0.14.04.1","0.100.1+dfsg-1ubuntu0.14.04.1","0.100.1+dfsg-1ubuntu0.14.04.2","0.100.1+dfsg-1ubuntu0.14.04.3","0.100.1+dfsg-1ubuntu0.14.04.4","0.100.2+dfsg-1ubuntu0.14.04.1","0.100.2+dfsg-1ubuntu0.14.04.2","0.100.3+dfsg-0ubuntu0.14.04.1","0.100.3+dfsg-0ubuntu0.14.04.1+esm1","0.101.4+dfsg-0ubuntu0.14.04.1+esm1","0.102.1+dfsg-0ubuntu0.14.04.1+esm1","0.102.2+dfsg-0ubuntu0.14.04.1+esm1","0.102.3+dfsg-0ubuntu0.14.04.1+esm1","0.102.4+dfsg-0ubuntu0.14.04.1+esm1","0.103.2+dfsg-0ubuntu0.14.04.1+esm1","0.103.2+dfsg-0ubuntu0.14.04.1+esm2","0.103.5+dfsg-0ubuntu0.14.04.1+esm1","0.103.6+dfsg-0ubuntu0.14.04.1+esm1","0.103.8+dfsg-0ubuntu0.14.04.1+esm1","0.103.9+dfsg-0ubuntu0.14.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.98.7+dfsg-0ubuntu4","0.98.7+dfsg-0ubuntu5","0.99+dfsg-1ubuntu1","0.99+dfsg-1ubuntu1.1","0.99+dfsg-1ubuntu1.2","0.99.2+dfsg-0ubuntu0.16.04.1","0.99.2+dfsg-0ubuntu0.16.04.2","0.99.2+dfsg-0ubuntu0.16.04.3","0.99.3+addedllvm-0ubuntu0.16.04.1","0.99.4+addedllvm-0ubuntu0.16.04.1","0.100.1+dfsg-1ubuntu0.16.04.1","0.100.1+dfsg-1ubuntu0.16.04.2","0.100.1+dfsg-1ubuntu0.16.04.3","0.100.2+dfsg-1ubuntu0.16.04.1","0.100.3+dfsg-0ubuntu0.16.04.1","0.101.4+dfsg-0ubuntu0.16.04.1","0.102.1+dfsg-0ubuntu0.16.04.2","0.102.2+dfsg-0ubuntu0.16.04.1","0.102.3+dfsg-0ubuntu0.16.04.1","0.102.4+dfsg-0ubuntu0.16.04.1","0.103.2+dfsg-0ubuntu0.16.04.1","0.103.2+dfsg-0ubuntu0.16.04.1+esm1","0.103.5+dfsg-0ubuntu0.16.04.1+esm1","0.103.6+dfsg-0ubuntu0.16.04.1+esm1","0.103.8+dfsg-0ubuntu0.16.04.1+esm1","0.103.9+dfsg-0ubuntu0.16.04.1+esm1","0.103.12+dfsg-0ubuntu0.16.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.99.2+dfsg-6ubuntu2","0.99.3~beta1+dfsg-2ubuntu1","0.99.3~beta1+dfsg-2ubuntu2","0.99.3+addedllvm-0ubuntu1","0.99.3+addedllvm-0ubuntu2","0.99.4+addedllvm-0ubuntu1","0.100.1+dfsg-1ubuntu0.18.04.1","0.100.1+dfsg-1ubuntu0.18.04.2","0.100.1+dfsg-1ubuntu0.18.04.3","0.100.2+dfsg-1ubuntu0.18.04.1","0.100.3+dfsg-0ubuntu0.18.04.1","0.101.4+dfsg-0ubuntu0.18.04.1","0.102.1+dfsg-0ubuntu0.18.04.2","0.102.2+dfsg-0ubuntu0.18.04.1","0.102.3+dfsg-0ubuntu0.18.04.1","0.102.4+dfsg-0ubuntu0.18.04.1","0.103.2+dfsg-0ubuntu0.18.04.1","0.103.2+dfsg-0ubuntu0.18.04.2","0.103.2+dfsg-0ubuntu0.18.04.3","0.103.5+dfsg-0ubuntu0.18.04.1","0.103.6+dfsg-0ubuntu0.18.04.1","0.103.8+dfsg-0ubuntu0.18.04.1","0.103.9+dfsg-0ubuntu0.18.04.1+esm1","0.103.12+dfsg-0ubuntu0.18.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.101.4+dfsg-1ubuntu1","0.102.1+dfsg-1ubuntu1","0.102.1+dfsg-2ubuntu1","0.102.1+dfsg-2ubuntu2","0.102.2+dfsg-1ubuntu1","0.102.2+dfsg-2ubuntu1","0.102.3+dfsg-0ubuntu0.20.04.1","0.102.4+dfsg-0ubuntu0.20.04.1","0.103.2+dfsg-0ubuntu0.20.04.1","0.103.2+dfsg-0ubuntu0.20.04.2","0.103.5+dfsg-1~20.04.1","0.103.6+dfsg-0ubuntu0.20.04.1","0.103.8+dfsg-0ubuntu0.20.04.1","0.103.9+dfsg-0ubuntu0.20.04.1","0.103.11+dfsg-0ubuntu0.20.04.1","0.103.12+dfsg-0ubuntu0.20.04.1","1.4.3+dfsg-0ubuntu0.20.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.22.04.1"}]}],"versions":["0.103.3+dfsg-1","0.103.4+dfsg-1","0.103.4+dfsg-1build1","0.103.5+dfsg-1","0.103.6+dfsg-0ubuntu0.22.04.1","0.103.8+dfsg-0ubuntu0.22.04.1","0.103.9+dfsg-0ubuntu0.22.04.1","0.103.11+dfsg-0ubuntu0.22.04.1","0.103.12+dfsg-0ubuntu0.22.04.1","1.4.3+dfsg-0ubuntu0.22.04.1","1.4.4+dfsg-0ubuntu0.22.04.1","1.5.3+dfsg-0ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.24.04.1"}]}],"versions":["1.0.2+dfsg-1ubuntu1","1.0.3+dfsg-2ubuntu1","1.0.4+dfsg-0ubuntu1","1.0.5+dfsg-1ubuntu1","1.0.5+dfsg-1.1ubuntu2","1.0.5+dfsg-1.1ubuntu3","1.0.7+dfsg-0ubuntu0.24.04.1","1.0.8+dfsg-0ubuntu0.24.04.1","1.4.3+dfsg-0ubuntu0.24.04.1","1.4.4+dfsg-0ubuntu0.24.04.1","1.5.3+dfsg-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.26.04.1"}]}],"versions":["1.4.3+dfsg-0ubuntu2","1.4.3+dfsg-0ubuntu3","1.4.3+dfsg-2ubuntu1","1.4.3+dfsg-2ubuntu2","1.4.3+dfsg-2ubuntu3","1.4.4+dfsg-0ubuntu0.26.04.1","1.5.3+dfsg-0ubuntu0.26.04.1","1.5.3+dfsg-0ubuntu0.26.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.22.04.1"}]}],"versions":["0.103.3+dfsg-1","0.103.4+dfsg-1","0.103.4+dfsg-1build1","0.103.5+dfsg-1","0.103.6+dfsg-0ubuntu0.22.04.1","0.103.8+dfsg-0ubuntu0.22.04.1","0.103.9+dfsg-0ubuntu0.22.04.1","0.103.11+dfsg-0ubuntu0.22.04.1","0.103.12+dfsg-0ubuntu0.22.04.1","1.4.3+dfsg-0ubuntu0.22.04.1","1.4.4+dfsg-0ubuntu0.22.04.1","1.5.3+dfsg-0ubuntu0.22.04.2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.24.04.1"}]}],"versions":["1.0.2+dfsg-1ubuntu1","1.0.3+dfsg-2ubuntu1","1.0.4+dfsg-0ubuntu1","1.0.5+dfsg-1ubuntu1","1.0.5+dfsg-1.1ubuntu2","1.0.5+dfsg-1.1ubuntu3","1.0.7+dfsg-0ubuntu0.24.04.1","1.0.8+dfsg-0ubuntu0.24.04.1","1.4.3+dfsg-0ubuntu0.24.04.1","1.4.4+dfsg-0ubuntu0.24.04.1","1.5.3+dfsg-0ubuntu0.24.04.1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg-0ubuntu0.26.04.1"}]}],"versions":["1.4.3+dfsg-0ubuntu2","1.4.3+dfsg-0ubuntu3","1.4.3+dfsg-2ubuntu1","1.4.3+dfsg-2ubuntu2","1.4.3+dfsg-2ubuntu3","1.4.4+dfsg-0ubuntu0.26.04.1","1.5.3+dfsg-0ubuntu0.26.04.1","1.5.3+dfsg-0ubuntu0.26.04.2"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-160000.1.1"}]}],"bundled":9}],"products":[{"vendor":"cisco","product":"cisco secure endpoint"}],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26","tags":["report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20347","tags":["web"]},{"url":"https://github.com/advisories/GHSA-mph8-4p68-pr43"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-20347","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-20347","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0348.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36180","tags":["report"]},{"url":"https://blog.clamav.net/2026/08/clamav-154-and-146-security-patch.html","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQHYDS3XT2PKXIDL3B6FNNJ3JT27FJ2T/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623706-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1271922","tags":["report"]},{"url":"https://bugzilla.suse.com/1274597","tags":["report"]},{"url":"https://bugzilla.suse.com/1274598","tags":["report"]},{"url":"https://bugzilla.suse.com/1274599","tags":["report"]},{"url":"https://bugzilla.suse.com/1274600","tags":["report"]},{"url":"https://bugzilla.suse.com/1274601","tags":["report"]},{"url":"https://bugzilla.suse.com/1274602","tags":["report"]},{"url":"https://bugzilla.suse.com/1274603","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-20348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46671","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623727-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264179-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264180-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264208-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-20347","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-20347","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8788-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-20337","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-20338","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-20339","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-20345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-20346","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-20348","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-20347","title":"ClamAV Mach-O File Format Processing Memory Corruption Vulnerability","description":"A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in Mach-O files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a crafted Mach-O file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T16:42:29.284Z","modified":"2026-08-07T21:10:28.338Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T13:35:44.571002Z"}],"euvd":[{"id":"EUVD-2026-54532","description":"A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in Mach-O files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a crafted Mach-O file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T16:42:29Z","modified":"2026-08-07T21:10:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:02:06.573967Z"}],"ghsa":[{"id":"GHSA-mph8-4p68-pr43","title":"A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote...","description":"A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\n\nThis vulnerability is due to improper boundary checks for content in Mach-O files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a crafted Mach-O file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T18:31:45Z","modified":"2026-08-07T18:31:53Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:10:11.66732Z"}],"nvd":[{"id":"CVE-2026-20347","description":"A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in Mach-O files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a crafted Mach-O file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T17:17:03.337Z","modified":"2026-10-23T20:10:00.16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:12:35.386166Z"}],"osv":[{"id":"ALPINE-CVE-2026-20347","description":"A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in Mach-O files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a crafted Mach-O file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T17:17:03.337Z","modified":"2026-11-03T06:33:01.606459539Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:15:53.944853Z"},{"id":"DEBIAN-CVE-2026-20347","description":"A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r \r This vulnerability is due to improper boundary checks for content in Mach-O files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a crafted Mach-O file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T17:17:03.337Z","modified":"2026-10-24T09:47:30.763814264Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:53.097669Z"},{"id":"UBUNTU-CVE-2026-20347","description":"A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in Mach-O files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a crafted Mach-O file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T17:17:00Z","modified":"2026-09-21T21:39:01.516797963Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:01.334185Z"},{"id":"AZL-95447","title":"CVE-2026-20347 affecting package clamav for versions less than 1.5.4-1","description":"A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of\u0026nbsp;memory corruption on an affected device.\r\n\r\nThis vulnerability is due to improper boundary checks for content in Mach-O files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a crafted Mach-O file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.","status":"published","published":"2026-08-07T17:17:03Z","modified":"2026-09-10T14:16:45.445581769Z","updated_at":"2026-11-02T15:28:12.028669Z"},{"id":"MGASA-2026-0348","title":"Updated clamav packages fix security vulnerabilities","description":"An indexing error while converting GPT partition names that could read or\nwrite beyond a stack-allocated partition entry. (CVE-2026-20345)\nAn integer overflow in the PESpin unpacker that could allocate an\nundersized buffer and then write beyond it while rebuilding a PE file.\n(CVE-2026-20339)\nAn integer underflow in the PDF parser that could cause a crash while\nreading a malformed hex string. (CVE-2026-20346)\nUndefined behavior and integer overflow in the Mach-O parser that could\ncause a crash while scanning a malformed Mach-O file. (CVE-2026-20347)\nXAR parser size handling that could request an excessive allocation or\nexceed scan limits while decompressing a malformed table of contents.\n(CVE-2026-20348)\n","status":"published","published":"2026-08-31T19:40:26Z","modified":"2026-09-01T03:15:03.645755465Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11583-1","title":"clamav-1.5.4-1.1 on GA media","description":"These are all security issues fixed in the clamav-1.5.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-24T00:00:00Z","modified":"2026-08-26T18:23:37.982310091Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:21831-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n\n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-11T12:01:10Z","modified":"2026-09-13T12:15:04.263684091Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:23706-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n\n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-11T12:00:06Z","modified":"2026-09-29T18:23:21.314210871Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:23727-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n\n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-11T12:00:06Z","modified":"2026-09-29T18:23:13.298145534Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:4179-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n  \n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-14T14:48:44Z","modified":"2026-09-15T17:00:06.098913277Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4180-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: ejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n  \n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-14T14:49:34Z","modified":"2026-09-15T17:00:06.103385082Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4208-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\n- CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597).\n- CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598).\n- CVE-2026-20339: integer overflow in the PESpin unpacker leads to undersized allocation and heap out-of-bounds write\n  (bsc#1274599).\n- CVE-2026-20345: out-of-bounds read/write via indexing error when converting GPT partition names (bsc#1274600).\n- CVE-2026-20346: integer underflow when parsing malformed PDF hex strings causes a crash (bsc#1274601).\n- CVE-2026-20347: integer overflow and undefined behavior when scanning malformed Mach-O files causes a crash\n  (bsc#1274602).\n- CVE-2026-20348: improper size handling in the XAR parser allows excessive allocation and scan-limit bypass\n  (bsc#1274603).\n- CVE-2026-46671: onenote_parser: Path traversal in `Parser:parse_notebook` allows reading files outside the notebook\n  directory (bsc#1271922).\n- CVE-2025-8088: rejects path separators in NTFS alternate data stream names to prevent extraction outside ClamAV's\n  temporary scan directory on Windows.\n\nChanges for clamav:\n\nUpdate to 1.5.4:\n\n * Fixed thread-safety issues in the clamd STATS command that could disclose\n process memory or crash the daemon while scans and STATS requests run\n concurrently. Also fixed partial socket-write handling used for large STATS\n responses.\n * FreeBSD: Restored support for safe quarantine move and remove actions while\n preserving protection against source-path replacement races.\n * Fixed an OpenSSL library-context leak in legacy hashing helpers when a\n requested message digest cannot be fetched, such as when the default\n provider is unavailable in a FIPS-enabled environment.\n * Upgraded the Rust crossbeam-epoch dependency to resolve the\n RUSTSEC-2026-0204 advisory.\n","status":"published","published":"2026-09-16T08:23:41Z","modified":"2026-09-16T21:45:03.610057216Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"USN-8788-1","title":"clamav vulnerabilities","description":"It was discovered that ClamAV incorrectly handled certain zip archive\nfiles. A remote attacker could possibly use this issue to cause ClamAV\nto crash, resulting in a denial of service. (CVE-2026-20337,\nCVE-2026-20338)\n\nIt was discovered that ClamAV incorrectly handled certain PESpin files.\nA remote attacker could possibly use this issue to cause ClamAV to\ncrash, resulting in a denial of service. (CVE-2026-20339)\n\nIt was discovered that ClamAV incorrectly handled certain GPT files. A\nremote attacker could possibly use this issue to cause ClamAV to crash,\nresulting in a denial of service. (CVE-2026-20345)\n\nIt was discovered that ClamAV incorrectly handled certain PDF files. A\nremote attacker could possibly use this issue to cause ClamAV to crash,\nresulting in a denial of service. (CVE-2026-20346)\n\nIt was discovered that ClamAV incorrectly handled certain Mach-O files.\nA remote attacker could possibly use this issue to cause ClamAV to\ncrash, resulting in a denial of service. (CVE-2026-20347)\n\nIt was discovered that ClamAV incorrectly handled certain XAR files. A\nremote attacker could possibly use this issue to cause ClamAV to crash,\nresulting in a denial of service. (CVE-2026-20348)","status":"published","published":"2026-09-21T12:05:10Z","modified":"2026-09-21T21:42:45.295245362Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}