CVE-2026-20213

Name of the Vulnerable Software and Affected Versions ClamAV (affected versions not specified)

Description An issue exists in the PE file format parser where improper boundary checks for content during scanning can lead to an out-of-bounds buffer write. A remote, unauthenticated attacker can exploit this by submitting a specially crafted file containing PE content. This memory corruption may cause the scanning process to terminate, resulting in a Denial of Service (DoS) condition, or potentially other expanded impacts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.