The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an issue in the C to Rust foreign function interface. An attacker could exploit this vulnerability by submitting a crafted file containing HTML content to be scanned by ClamAV on an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade clamav | Dec 10, 2025 | Apr 19, 2024 |
| Suse | — | Upgrade clamavUpgrade libclamav12Upgrade libfreshclam3Upgrade clamav-docs-htmlUpgrade libclammspack0Upgrade clamav-develUpgrade clamav-milter | Dec 5, 2025 | Feb 3, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub