CVE-2026-20339

Name of the Vulnerable Software and Affected Versions ClamAV (affected versions not specified)

Description An issue exists in the PESpin file format parser where improper boundary checks for content during scanning can lead to an integer overflow. An unauthenticated remote attacker can exploit this by submitting a specially crafted file containing PESpin content, resulting in memory corruption. This may cause the scanning process to terminate, leading to a Denial of Service (DoS) condition or other expanded impacts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.