CVE-2026-20244

Name of the Vulnerable Software and Affected Versions ClamAV (affected versions not specified)

Description An issue exists in the DMG file format parser where improper boundary checks for content during scanning can lead to memory corruption. On 32-bit platforms, this specifically manifests as an integer overflow. A remote, unauthenticated attacker can exploit this by submitting a specially crafted DMG file, causing the scanning process to terminate and resulting in a Denial of Service (DoS) condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.