A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an out of bounds read. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. An exploit could allow the attacker to terminate the scanning process.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade clamav | Aug 8, 2025 | Sep 4, 2024 |
| Amazon Linux Ami 2 | — | Upgrade clamav-milterUpgrade clamdUpgrade clamav-debuginfoUpgrade clamav-updateUpgrade clamav-develUpgrade clamav-dataUpgrade clamav-libUpgrade clamav-filesystemUpgrade clamav-docUpgrade clamav | Oct 3, 2024 | Sep 4, 2024 |
| Amazon_linux_2023 | — | Upgrade clamav-dataUpgrade clamav-debugsourceUpgrade clamav-update-debuginfoUpgrade clamav-milterUpgrade clamd-debuginfoUpgrade clamav-libUpgrade clamdUpgrade clamav-milter-debuginfoUpgrade clamav-filesystemUpgrade clamav-debuginfoUpgrade clamavUpgrade clamav-updateUpgrade clamav-lib-debuginfoUpgrade clamav-docUpgrade clamav-devel | Feb 17, 2025 | Sep 4, 2024 |
| Debian | — | Upgrade clamav | Nov 11, 2024 | Sep 4, 2024 |
| Freebsd | — | Upgrade clamav-ltsUpgrade clamav | Sep 11, 2024 | Sep 9, 2024 |
| Gentoo Linux | — | Upgrade app-antivirus/clamav. | Jul 9, 2025 | Sep 4, 2024 |
| Suse | — | Upgrade clamav-develUpgrade libfreshclam2Upgrade clamav-docs-htmlUpgrade libclammspack0Upgrade libclamav9Upgrade clamavUpgrade libfreshclam3Upgrade libclamav12Upgrade clamav-milter | Jan 14, 2025 | Sep 4, 2024 |
| Ubuntu | — | Upgrade clamavUpgrade clamav (Ubuntu Pro) | Sep 17, 2024 | Sep 4, 2024 |
| Zimbra Collaboration | — | Upgrade Zimbra Collaboration to the latest version | May 19, 2025 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub