Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-20338

ClamAV ZIP File Format Processing Memory Corruption Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper memory handling when processing content in zip files during scanning. An attacker could exploit this vulnerability by submitting a crafted zip file for scanning. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate as a result of a memory double-free, resulting in a DoS condition on the affected software.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Secure Endpoint

Default version status: unknown

  • 7.0.5affected
  • 6.2.19affected
  • 7.3.3affected
  • 7.2.13affected
  • 6.1.5affected
  • 6.3.1affected
  • 6.2.5affected
  • 7.3.5affected
  • 6.2.1affected
  • 7.2.7affected
  • 7.1.1affected
  • 6.3.5affected
  • 6.2.9affected
  • 7.3.1affected
  • 6.1.7affected
  • 7.2.11affected
  • 7.2.3affected
  • 7.1.5affected
  • 6.3.3affected
  • 7.3.9affected
  • 6.2.3affected
  • 6.1.9affected
  • 6.0.9affected
  • 7.2.5affected
  • 6.0.7affected
  • 6.3.7affected
  • 1.12.3affected
  • 1.8.0affected
  • 1.11.1affected
  • 1.12.4affected
  • 1.10.0affected
  • 1.12.0affected
  • 1.8.1affected
  • 1.10.1affected
  • 1.12.1affected
  • 1.12.6affected
  • 1.14.0affected
  • 1.10.2affected
  • 1.12.7affected
  • 1.12.2affected
  • 1.6.0affected
  • 1.9.0affected
  • 1.11.0affected
  • 1.7.0affected
  • 1.13.0affected
  • 1.8.4affected
  • 1.13.1affected
  • 1.9.1affected
  • 1.12.5affected
  • 1.13.2affected
  • 8.1.7.21512affected
  • 8.1.7affected
  • 8.1.5affected
  • 8.1.3.21242affected
  • 8.1.3affected
  • 8.1.5.21322affected
  • 8.1.7.21417affected
  • 1.14.1affected
  • 1.15.1affected
  • 1.15.2affected
  • 1.15.3affected
  • 1.15.4affected
  • 1.15.5affected
  • 1.15.6affected
  • 1.16.0affected
  • 1.16.1affected
  • 1.16.2affected
  • 1.16.3affected
  • 1.18.0affected
  • 1.18.1affected
  • 1.20.0affected
  • 1.21.0affected
  • 1.21.1affected
  • 1.21.2affected
  • 1.21.3affected
  • 1.22.0affected
  • 1.22.1affected
  • 1.22.2affected
  • 1.22.3affected
  • 1.22.4affected
  • 1.24.0affected
  • 1.24.1affected
  • 1.24.2affected
  • 1.24.3affected
  • 1.24.4affected
  • 1.26.0affected
  • 1.24.5affected
  • 1.26.1affected
  • 1.27.0affected
  • 1.15.0affected
  • 1.17.0affected
  • 1.17.1affected
  • 1.17.2affected
  • 1.19.0affected
  • 1.20.1affected
  • 1.20.2affected
  • 1.20.3affected
  • 1.20.4affected
  • 1.20.5affected
  • 1.20.6affected
  • 1.23.0affected
  • 1.23.1affected
  • 1.20.7affected
  • 1.20.8affected
  • 1.25.0affected
  • 1.25.1affected
  • 1.25.2affected
  • 1.27.1affected
  • 1.27.2affected
  • 7.3.13affected
  • 7.3.15affected
  • 7.4.1affected
  • 7.4.1.20425affected
  • 7.4.1.20439affected
  • 7.4.3affected
  • 7.4.3.20679affected
  • 7.4.5affected
  • 7.5.1.20813affected
  • 7.5.1.20833affected
  • 7.5.3affected
  • 7.5.5affected
  • 8.0.1.21160affected
  • 8.0.1.21164affected
  • 7.5.7affected
  • 7.5.9affected
  • 7.5.11affected
  • 8.1.7.21585affected
  • 7.5.13.21586affected
  • 7.5.13.21598affected
  • 8.2.1.21612affected
  • 8.2.1.21650affected
  • 7.5.15.21611affected
  • 7.5.17.21680affected
  • 8.2.3.30119affected
  • 8.2.4.30130affected
  • 8.4.0affected
  • 7.5.19affected
  • 8.4.1.30298affected
  • 8.4.2.30317affected
  • 8.4.1.30307affected
  • 7.5.20affected
  • 8.4.3affected
  • 8.4.4.30419affected
  • 8.4.4.30467affected
  • 7.5.21.21732affected
  • 8.4.5.30483affected

References