CL
Product
Clamav
103
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 32Medium 19Low 1
Watch
Add Clamav to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-20260 | 9.8 | Jun 18 | A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS)… Affected: before 1.0.9; 1.2.0 before 1.4.3 |
| CVE-2023-20032 | 9.8 | Mar 1 | On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and… Affected: through 0.103.7; 0.104.0 through 0.105.1; 1.0.0; 1.0.0; 1.0.0 |
| CVE-2013-7088 | 9.8 | Nov 15 | ClamAV before 0.97.7 has buffer overflow in the libclamav component Affected: before 0.97.7 |
| CVE-2013-7087 | 9.8 | Nov 15 | ClamAV before 0.97.7 has WWPack corrupt heap memory Affected: before 0.97.7 |
| CVE-2007-6745 | 9.8 | Nov 7 | clamav 0.91.2 suffers from a floating point exception when using ScanOLE2 Affected: 0.91.2 |
| CVE-2007-0899 | 9.8 | Nov 6 | There is a possible heap overflow in libclamav/fsg.c before 0.100.0 Affected: before 0.100.0 |
| CVE-2017-12379 | 9.8 | Jan 26 | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or… Affected: through 0.99.2 |
| CVE-2017-12377 | 9.8 | Jan 26 | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or… Affected: through 0.99.2 |
| CVE-2022-20792 | 7.8 | Aug 10 | A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior… Affected: through 0.103.5; 0.104.0 through 0.104.2 |
| CVE-2019-1785 | 7.8 | Apr 8 | A vulnerability in the RAR file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote attacker to cause a… Affected: 0.101.0; 0.101.1 |
| CVE-2017-12376 | 7.8 | Jan 26 | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or… Affected: through 0.99.2 |
| CVE-2026-20243 | 7.5 | Jul 1 | ClamAV ALZ Archive Processing Denial of Service Vulnerability Affected: 1.4.0 before 1.4.5; 1.5.0 before 1.5.3 |
| CVE-2026-20244 | 7.5 | Jul 1 | ClamAV DMG File Processing Denial of Service Vulnerability Affected: 0.98.1 before 1.4.5; 1.5.0 before 1.5.3 |
| CVE-2026-20215 | 7.5 | Jul 1 | ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability Affected: before 1.4.5; 1.5.0 before 1.5.3 |
| CVE-2026-20217 | 7.5 | Jul 1 | ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability Affected: before 1.4.5; 1.5.0 before 1.5.3 |
| CVE-2026-20216 | 7.5 | Jul 1 | ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability Affected: before 1.4.5; 1.5.0 before 1.5.3 |
| CVE-2026-20213 | 7.5 | Jul 1 | ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability Affected: before 1.4.5; 1.5.0 before 1.5.3 |
| CVE-2026-20214 | 7.5 | Jul 1 | ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability Affected: before 1.4.5; 1.5.0 before 1.5.3 |
| CVE-2025-20234 | 7.5 | Jun 18 | A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected… Affected: 1.2.0 before 1.4.3 |
| CVE-2025-20128 | 7.5 | Jan 22 | A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 1.0.0 before 1.0.8; 1.1.0 before 1.4.2 |
| CVE-2024-20505 | 7.5 | Sep 4 | ClamAV Memory Handling DoS Affected: before 0.103.12; 0.104.0 before 1.0.7; 1.2.0 before 1.3.2; 1.4.0 |
| CVE-2024-20380 | 7.5 | Apr 18 | A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device Affected: 1.3.0; 1.3.0; 1.3.0 |
| CVE-2022-20803 | 7.5 | Feb 17 | A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service… Affected: 0.104.0 before 0.104.3 |
| CVE-2022-20785 | 7.5 | May 4 | On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in HTML file… Affected: before 0.103.5; through 0.103.5; 0.104.0 before 0.104.2 |
| CVE-2022-20771 | 7.5 | May 4 | On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in the TIFF file… Affected: through 0.103.5; 0.104.0 through 0.104.2 |
| CVE-2022-20770 | 7.5 | May 4 | On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in CHM file… Affected: through 0.103.5; 0.104.0 through 0.104.2 |
| CVE-2022-20698 | 7.5 | Jan 14 | A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote… Affected: before 0.103.5; 0.104.0 before 0.104.2 |
| CVE-2021-1405 | 7.5 | Apr 8 | A vulnerability in the email parsing module in Clam AntiVirus (ClamAV) Software version 0.103.1 and all prior versions could allow an unauthenticated, remote attacker to cause a… Affected: through 0.103.1 |
| CVE-2021-1404 | 7.5 | Apr 8 | A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of… Affected: 0.103.0; 0.103.1 |
| CVE-2021-1252 | 7.5 | Apr 8 | A vulnerability in the Excel XLM macro parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a… Affected: 0.103.0; 0.103.1 |
| CVE-2020-3481 | 7.5 | Jul 20 | A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3 could allow an unauthenticated, remote attacker to cause a denial… Affected: 0.102.0 through 0.102.3 |
| CVE-2020-3123 | 7.5 | Feb 5 | A vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus (ClamAV) Software versions 0.102.1 and 0.102.0 could allow an unauthenticated, remote attacker to cause… Affected: 0.102.0; 0.102.1 |
| CVE-2013-7089 | 7.5 | Nov 15 | ClamAV before 0.97.7: dbg_printhex possible information leak Affected: before 0.97.7 |
| CVE-2019-1789 | 7.5 | Nov 5 | ClamAV versions prior to 0.101.2 are susceptible to a denial of service (DoS) vulnerability Affected: before 0.101.2 |
| CVE-2019-12625 | 7.5 | Nov 5 | ClamAV versions prior to 0.101.3 are susceptible to a zip bomb vulnerability where an unauthenticated attacker can cause a denial of service condition by sending crafted messages… Affected: before 0.101.3 |
| CVE-2017-12380 | 7.5 | Jan 26 | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an… Affected: through 0.99.2 |
| CVE-2017-12375 | 7.5 | Jan 26 | The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition… Affected: through 0.99.2 |
| CVE-2017-12374 | 7.5 | Jan 26 | The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition… Affected: through 0.99.2 |
| CVE-2016-1405 | 7.5 | Jun 8 | libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance… Affected: All versions, or not specified |
| CVE-2007-0897 | 7.5 | Feb 16 | Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor… Affected: before 0.90 |
| CVE-2019-15961 | 6.5 | Jan 15 | A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial… Affected: through 0.101.4; 0.102.0 |
| CVE-2024-20506 | 6.1 | Sep 4 | ClamAV Privilege Handling Escalation Vulnerability Affected: before 0.103.12; 0.104.0 before 1.0.7; 1.2.0 before 1.3.2; 1.4.0 |
| CVE-2022-20796 | 5.5 | May 4 | On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus… Affected: 0.103.4; 0.103.5; 0.104.1; 0.104.2 |
| CVE-2021-27506 | 5.5 | Mar 19 | The ClamAV Engine (version 0.103.1 and below) component embedded in Storsmshield Network Security (SNS) is subject to DoS in case of parsing of malformed png files Affected: through 0.103.1 |
| CVE-2019-1798 | 5.5 | Apr 8 | A vulnerability in the Portable Executable (PE) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote… Affected: through 0.101.1 |
| CVE-2019-1788 | 5.5 | Apr 8 | A vulnerability in the Object Linking & Embedding (OLE2) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated,… Affected: through 0.101.1 |
| CVE-2019-1787 | 5.5 | Apr 8 | A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote… Affected: through 0.101.1 |
| CVE-2019-1786 | 5.5 | Apr 8 | A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated,… Affected: 0.101.0; 0.101.1 |
| CVE-2018-15378 | 5.5 | Oct 15 | A vulnerability in ClamAV versions prior to 0.100.2 could allow an attacker to cause a denial of service (DoS) condition Affected: before 0.100.2 |
| CVE-2018-0360 | 5.5 | Jul 16 | ClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor file Affected: before 0.100.1 |