Cisco · Clamav · CVE-2026-20215
**Name of the Vulnerable Software and Affected Versions**
ClamAV (affected versions not specified)
**Description**
A flaw in the 7z file format parser allows an unauthenticated remote attacker to cause a Denial of Service (DoS) condition. The issue stems from improper boundary checks for content in 7z files during scanning, which can lead to an out-of-bounds buffer write, causing memory corruption. An attacker can trigger this by submitting a specially crafted 7z file for scanning, which may result in the termination of the ClamAV scanning process.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.