A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an out of bounds read. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. An exploit could allow the attacker to terminate the scanning process.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade clamav | Aug 8, 2025 | Sep 4, 2024 |
| Amazon Linux Ami 2 | — | Upgrade clamavUpgrade clamav-dataUpgrade clamav-develUpgrade clamav-updateUpgrade clamav-libUpgrade clamav-docUpgrade clamav-filesystemUpgrade clamav-milterUpgrade clamav-debuginfoUpgrade clamd | Oct 3, 2024 | Sep 4, 2024 |
| Amazon_linux_2023 | — | Upgrade clamav-update-debuginfoUpgrade clamav-debugsourceUpgrade clamd-debuginfoUpgrade clamav-milterUpgrade clamav-dataUpgrade clamav-lib-debuginfoUpgrade clamav-updateUpgrade clamavUpgrade clamav-debuginfoUpgrade clamav-filesystemUpgrade clamav-milter-debuginfoUpgrade clamav-docUpgrade clamav-develUpgrade clamav-libUpgrade clamd | Feb 17, 2025 | Sep 4, 2024 |
| Debian | — | Upgrade clamav | Nov 11, 2024 | Sep 4, 2024 |
| Freebsd | — | Upgrade clamav-ltsUpgrade clamav | Sep 11, 2024 | Sep 9, 2024 |
| Gentoo Linux | — | Upgrade app-antivirus/clamav. | Jul 9, 2025 | Sep 4, 2024 |
| Suse | — | Upgrade libclammspack0Upgrade clamav-docs-htmlUpgrade libclamav9Upgrade clamav-develUpgrade libfreshclam2Upgrade clamavUpgrade libfreshclam3Upgrade libclamav12Upgrade clamav-milter | Jan 14, 2025 | Sep 4, 2024 |
| Ubuntu | — | Upgrade clamavUpgrade clamav (Ubuntu Pro) | Sep 17, 2024 | Sep 4, 2024 |
| Zimbra Collaboration | — | Upgrade Zimbra Collaboration to the latest version | May 19, 2025 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub