A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an out of bounds read. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. An exploit could allow the attacker to terminate the scanning process.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade clamav | Aug 8, 2025 | Sep 4, 2024 |
| Amazon Linux Ami 2 | — | Upgrade clamav-libUpgrade clamav-filesystemUpgrade clamav-develUpgrade clamav-docUpgrade clamav-updateUpgrade clamav-dataUpgrade clamavUpgrade clamav-debuginfoUpgrade clamav-milterUpgrade clamd | Oct 3, 2024 | Sep 4, 2024 |
| Amazon_linux_2023 | — | Upgrade clamav-filesystemUpgrade clamav-updateUpgrade clamav-docUpgrade clamav-milter-debuginfoUpgrade clamav-debuginfoUpgrade clamav-lib-debuginfoUpgrade clamav-libUpgrade clamav-develUpgrade clamdUpgrade clamavUpgrade clamd-debuginfoUpgrade clamav-dataUpgrade clamav-debugsourceUpgrade clamav-milterUpgrade clamav-update-debuginfo | Feb 17, 2025 | Sep 4, 2024 |
| Debian | — | Upgrade clamav | Nov 11, 2024 | Sep 4, 2024 |
| Freebsd | — | Upgrade clamav-ltsUpgrade clamav | Sep 11, 2024 | Sep 9, 2024 |
| Gentoo Linux | — | Upgrade app-antivirus/clamav. | Jul 9, 2025 | Sep 4, 2024 |
| Suse | — | Upgrade libclamav9Upgrade clamav-docs-htmlUpgrade libfreshclam2Upgrade clamav-develUpgrade libclammspack0Upgrade libclamav12Upgrade libfreshclam3Upgrade clamav-milterUpgrade clamav | Jan 14, 2025 | Sep 4, 2024 |
| Ubuntu | — | Upgrade clamavUpgrade clamav (Ubuntu Pro) | Sep 17, 2024 | Sep 4, 2024 |
| Zimbra Collaboration | — | Upgrade Zimbra Collaboration to the latest version | May 19, 2025 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub