Browse CVEs

CRITICAL 9.8 CVE-2025-20260 A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a… Clamav 1.0.9 / 1.4.3+ Fix from $2,3002025-06-18 MEDIUM 6.1 CVE-2024-20506 A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior … Clamav 0.103.12 / 1.0.7+ Fix from $1,6002024-09-04 HIGH 7.5 CVE-2024-20505 A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior ve… Clamav 0.103.12 / 1.0.7+ Fix from $1,9502024-09-04 HIGH 7.5 CVE-2024-20380 A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affec… Clamav Mitigation only Fix from $1,9502024-04-18 MEDIUM 5.3 CVE-2024-20328EPSS 85% A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application … Clamav 1.0.5 / 1.2.2+ Fix from $1,6002024-03-01 HIGH 7.5 CVE-2022-20803 A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker t… Clamav 0.104.3+ Fix from $1,9502023-02-17 HIGH 7.8 CVE-2022-20792 A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS ve… Clamav after 0.104.2 Fix from $1,9502022-08-10 HIGH 7.5 CVE-2021-1404 A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote att… Clamav Mitigation only Fix from $1,9502021-04-08 HIGH 7.5 CVE-2021-1252 A vulnerability in the Excel XLM macro parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated… Clamav Mitigation only Fix from $1,9502021-04-08 HIGH 7.5 CVE-2019-1789 ClamAV versions prior to 0.101.2 are susceptible to a denial of service (DoS) vulnerability. An out-of-bounds heap read condition may occur when scan… Clamav 0.101.2+ Fix from $1,9502019-11-05 HIGH 7.5 CVE-2019-12625 ClamAV versions prior to 0.101.3 are susceptible to a zip bomb vulnerability where an unauthenticated attacker can cause a denial of service conditio… Clamav 0.101.3+ Fix from $1,9502019-11-05 MEDIUM 5.5 CVE-2019-1798 A vulnerability in the Portable Executable (PE) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allo… Clamav after 0.101.1 Fix from $1,6002019-04-08 HIGH 7.8 CVE-2019-1785 A vulnerability in the RAR file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticate… Clamav Mitigation only Fix from $1,9502019-04-08 MEDIUM 5.5 CVE-2019-1786 A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could a… Clamav Mitigation only Fix from $1,6002019-04-08 MEDIUM 5.5 CVE-2017-6418 libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted e-mail message. Clamav Patch available Fix from $1,6002017-08-07 MEDIUM 5.5 CVE-2017-6420 The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use-after-free) via a crafted PE… Clamav Patch available Fix from $1,6002017-08-07 MEDIUM 5.0 CVE-2014-9050 Heap-based buffer overflow in the cli_scanpe function in libclamav/pe.c in ClamAV before 0.98.5 allows remote attackers to cause a denial of service … Clamav after 0.94.3 Fix from $1,6002014-12-01 MEDIUM 5.0 CVE-2011-2721 Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of serv… Clamav after 0.97.1 Fix from $1,6002011-08-05 MEDIUM 6.8 CVE-2011-1003 Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers t… Clamav after 0.96.5 Fix from $1,6002011-02-23 HIGH 7.5 CVE-2010-4479 Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (application crash) or p… Clamav after 0.96.4 Fix from $1,9502010-12-07 HIGH 7.5 CVE-2010-4261 Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (mem… Clamav after 0.96.4 Fix from $1,9502010-12-07 MEDIUM 5.0 CVE-2010-4260 Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service (application c… Clamav after 0.96.4 Fix from $1,6002010-12-07 HIGH 9.3 CVE-2010-3434EPSS 7% Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial of service… Clamav after 0.96.2 Fix from $1,9502010-09-30 HIGH 10.0 CVE-2010-0098 ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to bypass virus detection via a crafte… Clamav after 0.96 Fix from $1,9502010-04-08 MEDIUM 5.0 CVE-2010-1311 The qtm_decompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service (memory corruption and a… Clamav after 0.96 Fix from $1,6002010-04-08 MEDIUM 5.0 CVE-2008-6845 The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a corrupted LZH file. Clamav after 0.93.3 Fix from $1,6002009-07-02 HIGH 10.0 CVE-2009-1372EPSS 8% Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause a denial… Clamav after 0.95 Fix from $1,9502009-04-23 MEDIUM 5.0 CVE-2009-1371 The CLI_ISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) via … Clamav after 0.95 Fix from $1,6002009-04-23 MEDIUM 5.0 CVE-2008-6680 libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-ze… Clamav after 0.94.2 Fix from $1,6002009-04-08 HIGH 7.5 CVE-2009-1241 Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive. Clamav 0.95+ Fix from $1,9502009-04-03