A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an out of bounds read. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. An exploit could allow the attacker to terminate the scanning process.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade clamav | Aug 8, 2025 | Sep 4, 2024 |
| Amazon Linux Ami 2 | — | Upgrade clamav-debuginfoUpgrade clamdUpgrade clamav-milterUpgrade clamav-updateUpgrade clamav-libUpgrade clamav-filesystemUpgrade clamav-develUpgrade clamavUpgrade clamav-docUpgrade clamav-data | Oct 3, 2024 | Sep 4, 2024 |
| Amazon_linux_2023 | — | Upgrade clamav-milterUpgrade clamd-debuginfoUpgrade clamav-update-debuginfoUpgrade clamav-debugsourceUpgrade clamav-dataUpgrade clamav-updateUpgrade clamav-lib-debuginfoUpgrade clamavUpgrade clamav-milter-debuginfoUpgrade clamav-libUpgrade clamdUpgrade clamav-develUpgrade clamav-docUpgrade clamav-debuginfoUpgrade clamav-filesystem | Feb 17, 2025 | Sep 4, 2024 |
| Debian | — | Upgrade clamav | Nov 11, 2024 | Sep 4, 2024 |
| Freebsd | — | Upgrade clamav-ltsUpgrade clamav | Sep 11, 2024 | Sep 9, 2024 |
| Gentoo Linux | — | Upgrade app-antivirus/clamav. | Jul 9, 2025 | Sep 4, 2024 |
| Suse | — | Upgrade clamav-milterUpgrade libclamav12Upgrade libfreshclam3Upgrade clamavUpgrade libclammspack0Upgrade clamav-develUpgrade libclamav9Upgrade libfreshclam2Upgrade clamav-docs-html | Jan 14, 2025 | Sep 4, 2024 |
| Ubuntu | — | Upgrade clamavUpgrade clamav (Ubuntu Pro) | Sep 17, 2024 | Sep 4, 2024 |
| Zimbra Collaboration | — | Upgrade Zimbra Collaboration to the latest version | May 19, 2025 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub