Clamav vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2020-37167 ClamAV versions prior to 0.103.0-rc contain a vulnerability in function name processing through the ClamBC bytecode interpreter that allows attackers to manipulHigh 8.6 · Feb 12, 2026
• CVE-2019-15961 A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attackerHigh 7.5 · Jan 15, 2020
• CVE-2013-7089 ClamAV before 0.97.7: dbg_printhex possible information leakHigh 7.5 · Nov 15, 2019
• CVE-2013-7088 ClamAV before 0.97.7 has buffer overflow in the libclamav componentCritical 9.8 · Nov 15, 2019
• CVE-2013-7087 ClamAV before 0.97.7 has WWPack corrupt heap memoryCritical 9.8 · Nov 15, 2019
• CVE-2007-6745 clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.Critical 9.8 · Nov 7, 2019
• CVE-2007-0899 There is a possible heap overflow in libclamav/fsg.c before 0.100.0.Critical 9.8 · Nov 5, 2019
• CVE-2016-1405 libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web High 7.5 · Jun 8, 2016
• CVE-2010-4479 Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (application crash) or possibly exeHigh 7.5 · Dec 7, 2010
• CVE-2010-4261 Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (memory corruptHigh 7.5 · Dec 7, 2010
• CVE-2010-3434 Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial of service (applicatiHigh 9.3 · Sep 30, 2010
• CVE-2010-0098 ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive tHigh 10 · Apr 8, 2010
• CVE-2009-1372 Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause a denial of serviceHigh 10 · Apr 23, 2009
• CVE-2009-1270 libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2High 7.8 · Apr 8, 2009
• CVE-2009-1241 Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive.High 7.5 · Apr 3, 2009
• CVE-2008-5525 ClamAV 0.94.1 and possibly 0.93.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing High 9.3 · Dec 12, 2008
• CVE-2008-3914 Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) liHigh 10 · Sep 10, 2008
• CVE-2008-0728 The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."High 10 · Feb 12, 2008
• CVE-2007-0897 Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (filHigh 7.5 · Feb 16, 2007
• CVE-2006-4018 Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attackers to execute arbitrHigh 7.5 · Aug 8, 2006
• CVE-2006-1615 Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote attackers to execute arbitrary code.High 10 · Apr 6, 2006