Off-by-one error in the parseicon function in libclamav/pe_icons.c in ClamAV 0.96 allows…
Priority LOW 25CWE-189Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-189 and the CVSS impact.
Summary
Off-by-one error in the parseicon function in libclamav/pe_icons.c in ClamAV 0.96 allows remote attackers to cause a denial of service (crash) via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling.
Why it matters now
EPSS 0.02889 86th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2010-1640
- 2026-10-03 Alias added: GHSA-hm2c-p9qf-rh42
References
Other 4
- http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blobdiff%3Bf=libclamav/pe_icons.c%3Bh=3f1bc5be69d0f9d84e576814d1a3cc6f40c4ff2c%3Bhp=39a714f05968f9e929576bf171dd0eb58bf06bef%3Bhb=7f0e3bbf77382d9782e0189bf80f5f59a95779b3%3Bhpb=f0eb394501ec21b9fe67f36cbf5db788711d4236
- [oss-security] 20100521 CVE Request: off by one DoS in pe_icons.c
- https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2031
- http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.96.1
More Clamav vulnerabilities
- TI-2024-13262 ClamAV VirusEvent File Processing Command Injection Vulnerability CVSS 3.1MEDIUM 5.3
- TI-2023-06741 Buffer overflow in Cisco Secure Web Appliance CVSS 3.1CRITICAL 9.8
- TI-2012-01281 The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir… CVSS 2.0MEDIUM 4.3
- TI-2012-01279 The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast!… CVSS 2.0MEDIUM 4.3
- TI-2012-01265 The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat… CVSS 2.0MEDIUM 4.3
- TI-2017-09151 Memory corruption in ClamAV AntiVirus software versions 0.99.2 and prior CVSS 3.0CRITICAL 9.8
Sources
- CVE-2010-1640 · CVE Program
- CVE-2010-1640 · NVD
- FIRST EPSS
- GHSA-hm2c-p9qf-rh42 · GitHub Advisory Database · CC BY 4.0
- CVE-2010-1640 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences