CVE-2026-20243

Name of the Vulnerable Software and Affected Versions ClamAV (affected versions not specified)

Description An issue exists in the ALZ file format parser where improper boundary checks for content during scanning can lead to an out-of-bounds buffer write. A remote, unauthenticated attacker can exploit this by submitting a specially crafted ALZ file, causing memory corruption. This may result in the termination of the scanning process, leading to a Denial of Service (DoS) condition, or potentially other expanded impacts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.