A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an out of bounds read. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. An exploit could allow the attacker to terminate the scanning process.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade clamav | Aug 8, 2025 | Sep 4, 2024 |
| Amazon Linux Ami 2 | — | Upgrade clamav-dataUpgrade clamav-develUpgrade clamav-updateUpgrade clamavUpgrade clamav-filesystemUpgrade clamav-docUpgrade clamav-libUpgrade clamav-milterUpgrade clamdUpgrade clamav-debuginfo | Oct 3, 2024 | Sep 4, 2024 |
| Amazon_linux_2023 | — | Upgrade clamav-dataUpgrade clamav-update-debuginfoUpgrade clamav-debugsourceUpgrade clamav-milterUpgrade clamd-debuginfoUpgrade clamav-debuginfoUpgrade clamav-develUpgrade clamdUpgrade clamav-filesystemUpgrade clamav-lib-debuginfoUpgrade clamavUpgrade clamav-updateUpgrade clamav-docUpgrade clamav-milter-debuginfoUpgrade clamav-lib | Feb 17, 2025 | Sep 4, 2024 |
| Debian | — | Upgrade clamav | Nov 11, 2024 | Sep 4, 2024 |
| Freebsd | — | Upgrade clamavUpgrade clamav-lts | Sep 11, 2024 | Sep 9, 2024 |
| Gentoo Linux | — | Upgrade app-antivirus/clamav. | Jul 9, 2025 | Sep 4, 2024 |
| Suse | — | Upgrade clamavUpgrade clamav-milterUpgrade libclamav12Upgrade libfreshclam3Upgrade libfreshclam2Upgrade clamav-docs-htmlUpgrade libclamav9Upgrade libclammspack0Upgrade clamav-devel | Jan 14, 2025 | Sep 4, 2024 |
| Ubuntu | — | Upgrade clamavUpgrade clamav (Ubuntu Pro) | Sep 17, 2024 | Sep 4, 2024 |
| Zimbra Collaboration | — | Upgrade Zimbra Collaboration to the latest version | May 19, 2025 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub