Tianchu Chen

**Name of the Vulnerable Software and Affected Versions** ClamAV (affected versions not specified) **Description** An issue exists in the PE file format parser where improper boundary checks for content during scanning can lead to an out-of-bounds buffer write. A remote, unauthenticated attacker can exploit this by submitting a specially crafted file containing PE content. This memory corruption may cause the scanning process to terminate, resulting in a Denial of Service (DoS) condition, or potentially other expanded impacts. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ClamAV (affected versions not specified) **Description** A flaw exists in the PESpin file format parser due to improper boundary checks for content during scanning. This issue can lead to an out-of-bounds buffer write, causing memory corruption on the affected device. An unauthenticated remote attacker can exploit this by submitting a specially crafted file containing PESpin content, which may cause the scanning process to terminate and result in a Denial of Service (DoS) condition. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.