Clamav · Clamav · CVE-2026-20244
**Name of the Vulnerable Software and Affected Versions**
ClamAV (affected versions not specified)
**Description**
An issue exists in the DMG file format parser where improper boundary checks for content during scanning can lead to memory corruption. On 32-bit platforms, this specifically manifests as an integer overflow. A remote, unauthenticated attacker can exploit this by submitting a specially crafted DMG file, causing the scanning process to terminate and resulting in a Denial of Service (DoS) condition.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.