Cisco · Clamav · CVE-2026-20243
**Name of the Vulnerable Software and Affected Versions**
ClamAV (affected versions not specified)
**Description**
An issue exists in the ALZ file format parser where improper boundary checks for content during scanning can lead to an out-of-bounds buffer write. A remote, unauthenticated attacker can exploit this by submitting a specially crafted ALZ file, causing memory corruption. This may result in the termination of the scanning process, leading to a Denial of Service (DoS) condition, or potentially other expanded impacts.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.