Skip to content
OpenAdvisories
Critical VA-25-171-01 1 CVE

ClamAV

Published Jun 20, 2025 · Updated Jun 20, 2025

Vendor: Cisco Product: ClamAV

Summary

ClamAV is an open source antivirus maintained by Cisco. A heap-based buffer overflow vulnerability in the PDF scanning process of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service or possibly execute arbitrary code.

Vulnerabilities 1

  • Critical 9.8
    CVE-2025-20260 Public exploit

    ClamAV PDF Scanning Buffer Overflow Vulnerability

    A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS) condition, or execute arbitrary code on an affected device. This vulnerability exists…

    Cisco ClamAV clamav clamav Network devices Debian Ubuntu Azure Linux Alpine

Revision history

  1. #1.0.0

    Initial publication