CVE-2026-20214

Name of the Vulnerable Software and Affected Versions ClamAV (affected versions not specified)

Description An issue exists in the FSG file format parser where improper boundary checks for content during scanning can lead to an out-of-bounds buffer write. A remote, unauthenticated attacker can exploit this by submitting a crafted file containing portable executable content compressed with FSG. This memory corruption may cause the scanning process to terminate, resulting in a Denial of Service (DoS) condition, which is a state where the software becomes unavailable to its intended users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.