CVE-2026-20345

Name of the Vulnerable Software and Affected Versions ClamAV (affected versions not specified)

Description A flaw in the GPT file format parser allows an unauthenticated remote attacker to cause a Denial of Service (DoS) or other impacts via memory corruption. The issue stems from improper handling of an endian conversion operation, which can lead to an out-of-bounds buffer write. An attacker can trigger this by submitting a specially crafted GPT file for scanning, which may cause the scanning process to terminate.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.