CVE-2026-20217

Name of the Vulnerable Software and Affected Versions ClamAV (affected versions not specified)

Description A flaw exists in the PESpin file format parser due to improper boundary checks for content during scanning. This issue can lead to an out-of-bounds buffer write, causing memory corruption on the affected device. An unauthenticated remote attacker can exploit this by submitting a specially crafted file containing PESpin content, which may cause the scanning process to terminate and result in a Denial of Service (DoS) condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.