CVE-2026-20244
Analyzed
Analyzed - Analysis Complete
Memory Corruption in ClamAV DMG Parser
Vulnerability report for CVE-2026-20244, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-07-01
Last updated on: 2026-07-09
Assigner: Cisco Systems, Inc.
Description
Description
A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.
This vulnerability is due to improper boundary checks for content in DMG files during scanning, which may result in an integer overflow on 32-bit platforms only. An attacker could exploit this vulnerability by submitting a crafted file that contains DMG content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| cisco | secure_endpoint | to 1.29.0 (exc) |
| cisco | secure_endpoint | to 8.6.2 (exc) |
| cisco | secure_endpoint | to 1.27.2 (exc) |
| clamav | clamav | From 1.5.0 (inc) to 1.5.3 (exc) |
| clamav | clamav | From 0.98.1 (inc) to 1.4.5 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-120 | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. |
