Clamav vulnerabilities
We track 14 vulnerabilities in Clamav products. 14 are rated high or critical, and none are known to be exploited. The most recent was published on July 1, 2026.
Latest Clamav vulnerabilities
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improp
- 7.5 High severity
Cisco Secure Endpoint: Allocation of Resources Without Limits or Throttling
A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper handling of temporary resources during file scanning. An att
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper b
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper b
- 7.5 High severity
Cisco Secure Endpoint: Out-of-bounds Read
A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An
- 7.5 High severity
Cisco Secure Endpoint: Heap-based Buffer Overflow
A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an integer underflow in a
- 9.8 Critical severity
Cisco Secure Web Appliance: Out-of-bounds Write
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remo
- 7.8 High severity
Clam AntiVirus (ClamAV): Out-of-bounds Write
A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an authenticated, local attacker to crash ClamAV at database load
- 7.5 High severity
Cisco AMP for Endpoints: Missing Release of Memory after Effective Lifetime
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in HTML file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.
- 7.5 High severity
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5…
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in the TIFF file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS versio
- 7.5 High severity
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5…
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in CHM file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.1