CVE-2026-20348

Name of the Vulnerable Software and Affected Versions ClamAV (affected versions not specified)

Description A flaw in the XAR file format parser allows an unauthenticated remote attacker to cause memory corruption. This occurs due to improper boundary checks for content within XAR files during the scanning process. An attacker can trigger this by submitting a specially crafted XAR file, which may lead to the termination of the scanning process and result in a Denial of Service (DoS) condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.