Skip to content
OpenAdvisories

Package · Debian

clamav

169 known vulnerabilities.

12 results · Clear filters · Feed

  • High 7.5
    CVE-2026-20217 Public exploit

    ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability

    A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to impro…

  • Critical 9.8
    CVE-2025-20260 Public exploit

    ClamAV PDF Scanning Buffer Overflow Vulnerability

    A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS) condition, or execute arbitrary code on an affected device. This vulnerability exists…

  • Medium 5.3
    CVE-2023-20052 Public exploit

    On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG f…

  • Unscored —
    CVE-2018-0202 Public exploit

    clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause…

  • Unscored —
    CVE-2008-5314 Public exploit

    Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denia…

  • Unscored —
    CVE-2007-6335 Public exploit EPSS 18%

    Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW…

  • Unscored —
    CVE-2007-4560 Public exploit EPSS 84%

    clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary comman…

  • Unscored —
    CVE-2007-3725 Public exploit

    The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assisted remote attackers to cause a denial o…

  • Unscored —
    CVE-2006-4182 Public exploit EPSS 21%

    Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a deni…

  • Unscored —
    CVE-2006-5295 Public exploit EPSS 11%

    Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning servic…

  • Unscored —
    CVE-2006-4018 Public exploit EPSS 19%

    Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 …

  • Unscored —
    CVE-2004-0270 Public exploit EPSS 10%

    libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail me…