CVE-2026-20347

Name of the Vulnerable Software and Affected Versions ClamAV (affected versions not specified)

Description An issue exists in the Mach-O file format parser where improper boundary checks for content during scanning can lead to an out-of-bounds buffer read. A remote, unauthenticated attacker can exploit this by submitting a specially crafted Mach-O file, potentially causing memory corruption. This may result in the termination of the scanning process, leading to a Denial of Service (DoS) condition, or other expanded impacts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.