7.5
CVE-2026-20345
- EPSS 0.33%
- Veröffentlicht 07.08.2026 16:42:46
- Zuletzt bearbeitet 11.08.2026 18:54:19
- CVE-Watchlists
- Unerledigt
ClamAV GPT File Format Processing Memory Corruption Vulnerability
A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper handling of an endian conversion operation, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted GPT file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerCisco
≫
Produkt
Cisco Secure Endpoint
Default Statusunknown
Version
1.12.3
Status
affected
Version
1.8.0
Status
affected
Version
1.11.1
Status
affected
Version
1.12.4
Status
affected
Version
1.10.0
Status
affected
Version
1.12.0
Status
affected
Version
1.8.1
Status
affected
Version
1.10.1
Status
affected
Version
1.10.2
Status
affected
Version
1.12.2
Status
affected
Version
1.6.0
Status
affected
Version
1.9.0
Status
affected
Version
1.7.0
Status
affected
Version
1.12.1
Status
affected
Version
1.12.6
Status
affected
Version
1.8.4
Status
affected
Version
1.11.0
Status
affected
Version
1.9.1
Status
affected
Version
1.12.5
Status
affected
Version
2.0.2
Status
affected
Version
1.1.0
Status
affected
Version
1.14.0
Status
affected
Version
2.4.0
Status
affected
Version
1.15.2
Status
affected
Version
1.16.0
Status
affected
Version
1.21.0
Status
affected
Version
1.22.2
Status
affected
Version
1.24.5
Status
affected
Version
1.19.0
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.33% | 0.253 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Cisco PSIRT | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-121 Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26