CVE-2026-20338

Name of the Vulnerable Software and Affected Versions ClamAV (affected versions not specified)

Description A flaw in the zip archive parser allows an unauthenticated remote attacker to cause a Denial of Service (DoS) condition. The issue stems from improper memory handling during the scanning of zip files, specifically a memory double-free—which occurs when the program attempts to free the same memory location twice—causing the scanning process to terminate when a specially crafted zip file is processed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.