Vulnerability index

Browse CVEs

35 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Clamav CRITICAL 9.8
CVE-2025-20260

A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a…

Fix: 1.0.9 / 1.4.3+
Fix from $2,300 2025-06-18
Clamav MEDIUM 6.1
CVE-2024-20506

A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior …

Fix: 0.103.12 / 1.0.7+
Fix from $1,600 2024-09-04
Clamav HIGH 7.5
CVE-2024-20505

A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior ve…

Fix: 0.103.12 / 1.0.7+
Fix from $1,950 2024-09-04
Clamav HIGH 7.5
CVE-2024-20380

A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affec…

Mitigation only
Fix from $1,950 2024-04-18
Clamav MEDIUM 5.3
CVE-2024-20328EPSS 85%

A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application …

Fix: 1.0.5 / 1.2.2+
Fix from $1,600 2024-03-01
Clamav HIGH 7.5
CVE-2022-20803

A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker t…

Fix: 0.104.3+
Fix from $1,950 2023-02-17
Clamav HIGH 7.8
CVE-2022-20792

A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS ve…

Fix: after 0.104.2
Fix from $1,950 2022-08-10
Clamav HIGH 7.5
CVE-2021-1404

A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote att…

Mitigation only
Fix from $1,950 2021-04-08
Clamav HIGH 7.5
CVE-2021-1252

A vulnerability in the Excel XLM macro parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated…

Mitigation only
Fix from $1,950 2021-04-08
Clamav HIGH 7.5
CVE-2019-1789

ClamAV versions prior to 0.101.2 are susceptible to a denial of service (DoS) vulnerability. An out-of-bounds heap read condition may occur when scan…

Fix: 0.101.2+
Fix from $1,950 2019-11-05
Clamav HIGH 7.5
CVE-2019-12625

ClamAV versions prior to 0.101.3 are susceptible to a zip bomb vulnerability where an unauthenticated attacker can cause a denial of service conditio…

Fix: 0.101.3+
Fix from $1,950 2019-11-05
Clamav MEDIUM 5.5
CVE-2019-1798

A vulnerability in the Portable Executable (PE) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allo…

Fix: after 0.101.1
Fix from $1,600 2019-04-08
Clamav HIGH 7.8
CVE-2019-1785

A vulnerability in the RAR file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticate…

Mitigation only
Fix from $1,950 2019-04-08
Clamav MEDIUM 5.5
CVE-2019-1786

A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could a…

Mitigation only
Fix from $1,600 2019-04-08
Clamav MEDIUM 5.5
CVE-2017-6418

libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted e-mail message.

Patch available
Fix from $1,600 2017-08-07
Clamav MEDIUM 5.5
CVE-2017-6420

The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use-after-free) via a crafted PE…

Patch available
Fix from $1,600 2017-08-07
Clamav MEDIUM 5.0
CVE-2014-9050

Heap-based buffer overflow in the cli_scanpe function in libclamav/pe.c in ClamAV before 0.98.5 allows remote attackers to cause a denial of service …

Fix: after 0.94.3
Fix from $1,600 2014-12-01
Clamav MEDIUM 5.0
CVE-2011-2721

Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of serv…

Fix: after 0.97.1
Fix from $1,600 2011-08-05
Clamav MEDIUM 6.8
CVE-2011-1003

Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers t…

Fix: after 0.96.5
Fix from $1,600 2011-02-23
Clamav HIGH 7.5
CVE-2010-4479

Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (application crash) or p…

Fix: after 0.96.4
Fix from $1,950 2010-12-07
Clamav HIGH 7.5
CVE-2010-4261

Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (mem…

Fix: after 0.96.4
Fix from $1,950 2010-12-07
Clamav MEDIUM 5.0
CVE-2010-4260

Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service (application c…

Fix: after 0.96.4
Fix from $1,600 2010-12-07
Clamav HIGH 9.3
CVE-2010-3434EPSS 7%

Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial of service…

Fix: after 0.96.2
Fix from $1,950 2010-09-30
Clamav HIGH 10.0
CVE-2010-0098

ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to bypass virus detection via a crafte…

Fix: after 0.96
Fix from $1,950 2010-04-08
Clamav MEDIUM 5.0
CVE-2010-1311

The qtm_decompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service (memory corruption and a…

Fix: after 0.96
Fix from $1,600 2010-04-08
Clamav MEDIUM 5.0
CVE-2008-6845

The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a corrupted LZH file.

Fix: after 0.93.3
Fix from $1,600 2009-07-02
Clamav HIGH 10.0
CVE-2009-1372EPSS 8%

Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause a denial…

Fix: after 0.95
Fix from $1,950 2009-04-23
Clamav MEDIUM 5.0
CVE-2009-1371

The CLI_ISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) via …

Fix: after 0.95
Fix from $1,600 2009-04-23
Clamav MEDIUM 5.0
CVE-2008-6680

libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-ze…

Fix: after 0.94.2
Fix from $1,600 2009-04-08
Clamav HIGH 7.5
CVE-2009-1241

Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive.

Fix: 0.95+
Fix from $1,950 2009-04-03