CVE-2026-20215

Name of the Vulnerable Software and Affected Versions ClamAV (affected versions not specified)

Description A flaw in the 7z file format parser allows an unauthenticated remote attacker to cause a Denial of Service (DoS) condition. The issue stems from improper boundary checks for content in 7z files during scanning, which can lead to an out-of-bounds buffer write, causing memory corruption. An attacker can trigger this by submitting a specially crafted 7z file for scanning, which may result in the termination of the ClamAV scanning process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.