Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

103 records

Priority MEDIUM 40

A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2026-07-01 No fix listed CWE-120
Priority MEDIUM 40

A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2026-07-01 No fix listed CWE-120
Priority MEDIUM 40

A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2026-07-01 No fix listed CWE-120
Priority MEDIUM 40

A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected dev…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2026-07-01 No fix listed CWE-120
Priority MEDIUM 40

A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2026-07-01 No fix listed CWE-120
Priority MEDIUM 40

A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2026-07-01 No fix listed CWE-120
Priority MEDIUM 52

A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS) condition, or execute arbitrary code on an aff…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01643 Published 2025-06-18 No fix listed CWE-122
Priority LOW 36

A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01815 Published 2025-01-22 No fix listed CWE-122
Priority LOW 27

A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and…

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00318 Published 2024-09-04 No fix listed CWE-754
TI-2024-13429 CVE-2024-20505 · GHSA-6qcx-p3rr-pfwf

ClamAV Memory Handling DoS

Priority LOW 34

A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and al…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00555 Published 2024-09-04 No fix listed CWE-125
Priority MEDIUM 41

A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01101 Published 2024-04-18 No fix listed CWE-475
Priority HIGH 67

A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file nam…

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.84841 Published 2024-03-01 No fix listed CWE-78
Priority MEDIUM 45

A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnera…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01056 Published 2023-02-17 No fix listed CWE-415
Priority LOW 34

On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could a…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.07003 Published 2023-02-16 No fix listed CWE-611
Priority HIGH 66

On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earl…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30061 Published 2023-02-16 No fix listed CWE-120
TI-2022-05351 CVE-2022-20792 · GHSA-c59m-xfxc-m38p

Out-of-bounds read in Cisco Clam AntiVirus

Priority LOW 37

A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an authenticated, local at…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00573 Published 2022-08-10 No fix listed CWE-125
Priority LOW 29

On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00388 Published 2022-05-04 No fix listed CWE-822
Priority MEDIUM 49

On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in HTML file parser of Clam AntiVirus (ClamAV) versions 0.…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.07117 Published 2022-05-04 No fix listed CWE-401
Priority MEDIUM 48

On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in the TIFF file parser of Clam AntiVirus (ClamAV) version…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05882 Published 2022-05-04 No fix listed CWE-399
Priority MEDIUM 53

On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in CHM file parser of Clam AntiVirus (ClamAV) versions 0.1…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.07074 Published 2022-05-04 No fix listed CWE-399
Priority MEDIUM 45

A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service cond…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0329 Published 2022-01-14 Fixed in 0.103.5, 0.104.2 CWE-20
Priority MEDIUM 43

A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02132 Published 2021-04-08 No fix listed CWE-20
Priority MEDIUM 44

A vulnerability in the email parsing module in Clam AntiVirus (ClamAV) Software version 0.103.1 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03031 Published 2021-04-08 No fix listed CWE-120
Load more