ClamAV vulnerabilities

CVEs whose affected-version data names the ClamAV package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-20260Critical· 9.8PoC

1y ago

ClamAV PDF Scanning Buffer Overflow Vulnerability

A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS) condition, or execute arbitrary code on an affected device. …

▾ AbyssalCisco · ClamAVEPSS 1.6%via CVEORG