CVE-2026-20337

Name of the Vulnerable Software and Affected Versions ClamAV (affected versions not specified)

Description An issue in the zip archive parser allows an unauthenticated remote attacker to cause a Denial of Service (DoS) condition. This occurs due to improper boundary checks for content within zip files during the scanning process, which can lead to an out-of-bounds write condition. An attacker can trigger this by submitting a specially crafted zip file, causing the scanning process to terminate.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.